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[0 3 3 1 ] 

[0 3 3 2 ] 
[il2 1] 

A * A > a bc [k;|000 =[z ( Of ) ]A ( A 

c4=( A ) a /? bo MQQQ =[z ( « ) ]C ( A ) 0 bc [k]000 

[0 3 3 3 ] 

t> r-ym&m*B%-m.-WL, ^^ii (mi 0^134) , ^T^wt^* 

[0 3 3 4] 
[it 1 2 2 ] 

t u QfJa=1 A 

[0 3 3 5] 

[0 3 3 6] 
m 1 2 3 ] 

k=m+1 m+n, b e {0,1}, £=1 A 

[0 3 3 7] 
[0 3 3 8] 
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[il24] 

A*(A)Qfb I - k:)0=[z (a f ) ]A (A)b [:k;]0 
c *( A ) a 0 b [[0o =[2 ( or ) ]c ( A ) P 

[0 3 3 9] 

xtjom-^jczmfrm^L, m&*&mL mi 00135) , 

[0 3 4 0] 
[112 5] 

t" a J a =1 A '*- k=1 '.be {0,1} 

[0 3 4 1 ] 

[ 0 3 4 2 ] 
[|U 2 6 J 

A t*( A ) ffb [k]0 < z ( or)] A t( A )b Cl0o 

[0 3 4 3 ] 

fc, l±l*OHt-t^:=Sr^m-^b, #t**^5B-r^ (HI 0O136) 0 
[0 3 4 4 ] 

137) o 

[0 3 4 5] 

^TOff#^^i±, S&C^tWbl £:X<D a =l A. <£T<7) 

[0 3 4 6] 
[»12 7] 

b,c, e [0,1} 

[0 3 4 7] 
CULT, 
[0 3 4 8] 
[112 8] 

Abc Ck] =A(A)bc Ck]ooo 

Bbc [l0 = B(A)bc [k:)000 -z a=1 A A*CA)<*bc Ck]000 

cQfbc [k^ c(A)abc Ck3ooo 

D a bc [(0= D ( A ) or bc Ck]000 - 1 a=1 A c*( A ) or ^ bc^^ 
[0 3 4 9] 
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^T<75k=m+1 m+iu ^TW S =1 , A> 

[0 3 5 0 ] 
[Itl 2 9] 

b. e [0,1] 



[0 3 5 1 ] 

[ 0 3 5 2 ] 
[tl 3 0] 

Ab Ck) =AU)b Ck]o 

B b [k]= B ( A )b [|0Q _ Z a=1 A A « A ) or b [k]0 
C«b C|0= cCA)ffb [|JO 

D or b [kr D ( A ) or b mQ -I ff=1 AtfKA)^b [k}0 



[0 3 5 3 ] 

<£T<7) k=l K <£T<7) 

[0 3 5 4 ] 
[113 1] 

b e [0,1] 

[0 3 5 5 ] 

[0 3 5 6 ] 
m 1 3 2 ] 

A tb [ k ]= AtU)b CkD0 

Blt» aj = B KA)b C|0crA tKA)«b i:i0o 

[0 3 5 7] 

Sr^- MS-^Xfc (0100138) 0 

[0 3 5 8 ] 

[0 3 5 9] 
[S13 3] 

i/«> !i, ±X(D k=m+1 + I r=1 a-1l r ,...,m+X r=1 <* l r 
[0 3 6 0] 

mum 2004-3077570 



#11 2004-016881 



i-i? I 35/ 



, ^t^^l A CHU, b TkJ < 

[0 3 6 1 ] 
[1134] 

G b Ckr BbrkJ Ck3-^ brkJ Ck3]A brkJ Ck] 

x b c*^ =D^r kJw _ [x ~br kJ[kD]cy3 b r kJ[k) 

[0 3 6 2] 

fcSUftU <&ga-t* (0100139) o -cTX&^L^-r-^tiA^coBf^^m^-L^T" 

[0 3 6 3 ] 

[0 3 6 4] 
[»13 5] 

[0 3 6 5] 

MU <£TC>k=m+l ,m+n> iTWjS-l AtHLT, 

[0 3 6 6] 
m 1 3 6 ] 



Y<jS)er k j 3 l= [ x b(^) Ck] ]G 



[0 3 6 7] 

zmn-tzzt"?, \t}<Dm j %^:(D^(DiEm±*mi-f2> .mi oouo) „ iiu & 

L 

[0 3 6 8] 
1*13 7] 

G b j- k ]=0 &b £ k =0, G b (; k ^=G ^ G> e k =1 

[0 3 6 9] 

[0 3 7 0] 

[EHfrOffHffi] 

[0 3 7 1] 

[1:13 8] 

u a 

[0 3 7 2] 

14*-*L***t, ^T©^- hGkk=i J:iLTM^if ^tL^^X^J^feffi^J* 
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JSLTOJ:^ l-**TV»< (II 0 co 141) 0 - iil)m$&<VWm<DmMX& 2> o ffl L^- h G 
kClif - hGi fc^- VGitDmjjtfXZlZti&tir&o 
[0 3 7 3] 

^t<7)/3=l A CIIU, 

[0 3 7 4] 
[mi 3 9] 

b Ck] =:BbriJbrjJ Ckr EZ r=i A(x(r)bnj Ckl + x (r)brjJ Ck]^ Ab r Ubrjj ClJ 

b (jS) Cki = D)S bFiJ brjJ [kl - ^ r =i A(x(r)bnj Ck] + x ( ^ )br JJc k ])] o/8 bHj brjj C|0 

an 

[0 3 7 5] 

(HI 1 0 CD 142) „ 
0=1,..., A CUT, 
[0 3 7 6] 
[*14 0] 



Y (/mrkj Cl0 = [xb(^) [k] ]G 

[0 3 7 7] 

*fltB1-* (HI 0 CD 143) „!IU & L 
[0 3 7 8] 
[114 1] 

G b Ckr o fct> £ k =0. G b Ck] =G ft* e k =1 

[0 3 7 9] 

[0 3 8 0] 
[tl4 2] 

brkj = e k 

[0 3 8 1 ] 

[0 3 8 2] 

[mUcDfFffi] 

iis^o«kaT*^i«LfeiEw*tftfE#tt*ftiE , t* (mi ocdi44) o timmtf&xiD 

[0 3 8 3 ] 

^-ccDft#^e 

[0 3 8 4] 
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m 1 4 3 ] 



[0 3 8 5] 

[0 3 8 6 ] 
[It 1 4 4 ] 



Gt [k3 =Btbrkj [kr [z r=1 A (x (r)brkj C|0 ] A it>na Cl0 



[0 3 8 7] 

m 1 0 <?>145) 
[0 3 8 8 ] 

[ 0 3 8 9 ] 

mi 4 5] 



^aWl A 



[0 3 9 0] 

te-ett-rtu ^t«k=i ikpl-c, 

[0 3 9 1 ] 
[il4 6] 



[0 3 9 2 ] 

^4SLt (II 0O146) <km-f2> (mi 0O147) o 
[0 3 9 3 ] 

(moons) Lx&m-r& (mio<oi49) 0 

[0 3 9 4] 

[0 3 9 5 ] 
[Wi 1 4 7 ] 

[0 3 9 6] 

[0 3 9 7] 
[^1 4 8] 



[0 3 9 8 ] 

j&» HI S& coffin (0 110306) (01OCD15O) o 

[0 3 9 9 ] 
k=l, CiLT, 
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[0 4 0 0] 
[114 9] 

[0 4 0 1 ] 

4 felfb TkJ bOT?* *) s 
[0 4 0 2] 
[115 0] 

gJ> Ci0 =g 

[0 4 0 3 ] 

&e»lfb TkJ -IT* So 
[0 4 0 4] 

[0 4 0 5] 
[115 1] 

u a 

[0 4 0 6 ] 

W\ &X<Dk=l m+n, ^TCO 

[0 4 0 7] 
[115 2] 

be{0,1] 

[0 4 0 8] 

CflLt, 
[0 4 0 9] 
[115 3] 

*' Caf)b D0 e R z/ « z 

z'(a> S R Z/qZ 



[0 4 10] 

[0411] 
[115 4] 



Z'(ar) = [ 2 '(a>]G 
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[0412] 

[0413] 
If 1 5 5] 

0 = Hash(E.G,tY(«)b Ck;) } k=1 m+n;b=0J , Z<* >, M^b^}^ m+n;b=0 ^ Z<«)) mod p 

[0414] 

££J&U ^t«k=l ra+n N ^tco 

[0 4 15] 
m 1 5 6 ] 

be {0,1) 

[0 4 16] 

[0 4 17] 
[tl5 7] 

x " (a)b Ck] = e x(a?)b CkD +x ' (a)b Ck] mod q 
Z "(af) = 0 z (a) + z <ar) mod q 



[0 4 18] 

*4j£t4o SEE^li. ^TOk=l m+n, 

[0 4 19] 
[115 8] 

be{0,1] 

[0 4 2 0] 

[0 4 2 1 ] 
[Si 1 5 9 ] 

Y'( )b [k> Z < a ),x'< « )b Ck] , z"< » ) 

[0 4 2 2 ] 

[0 4 2 3] 
[116 0] 

8 = Hash (EQXYt-fcooWl m + n;b=0,V Z (ff) - ^"^OOV^I m+n^O.I- ^ > ™ d 1 

[0 4 2 4] 
[0 4 2 5] 
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[ifcl 6 1] 



[x"(a)b Ck] ]G = [6 ] ^ a)b l k -] +Y <a)b M 
[ 2 "(a) ]q = 6 Z<a)+ Z<«) 

[0 4 2 6 ] 

[0 4 2 7] 

[glJBB^B] 

[0 4 2 8 ] 
[116 2] 

M 

[0 4 2 9] 

[0 4 3 0] 
[116 3] 

k=m+1 + I i g =1 tt-tlg m+I j8 =1 a I^g 

r* 

[0 4 3 1 ] 

[0 4 3 2 ] 
[11 6 4 ] 

brkj <= io,i] 

[0 4 3 3 ] 

[0 4 3 4 ] 
[116 5] 

x"" bl " kJ CkD e R Z ^ Z 

[0 4 3 5] 

km: u 

[0 4 3 6 ] 
[116 6] 

Y "" brkJ Ck3 = ^ ,bl " kJ Ck^ G 

[0 4 3 7] 
[0 4 3 8] 
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m 1 6 7 1 

^brkjDI^ e R Z/qZ 
x ~"brkjD1 [k;j e R Z/qZ 

[0 4 3 9] 

[0 4 4 0] 
[Ski 6 8] 

Y~'brkjni Ck;| = [x ~"brkjni Ck:) ]G _ [ebrkjcn^] Y ~brkjni Ck;) 

[0 4 4 1 ] 

[0 4 4 2] 
[&16 9] 

[0 4 4 3] 

[0 4 4 4] 
[8U 7 0] 

k=m+1 + I £ =1 af_1 I i g m+Z £ =1 ^ I £ 

[0 4 4 5] 

CULT, 
[0 4 4 6 ] 
Hfcl 7 1] 

0 [k] = HashCE.G, lY^^.Y^^jlb^ j ) mod q 

^ brkJ Ck]=^k3-e brkjD1 Ck3 

[0 4 4 7] 

[0 4 4 8] 
[1:172] 

x ~" brkJ Ck] = ebrkJ [k3 x ~ brkJ Ck] +x ~' brkJ [k3 mod 

[0 4 4 9] 
[0 4 5 0] 
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[0 4 5 1 ] 
[&17 3] 



[0 4 5 2] 

[0 4 5 3 ] 

Sfcl 7 4] 



k=m+1+I ^i**" 1 ^ m+I 1^,0=0,1 



[0 4 5 4 ] 
KM**-* 

[0 4 5 5] 
1117 5] 



Y ~' b tk> ^°Ck]'^' b Ck] 



[0 4 5 6] 

[0 4 5 7] 

[0 4 5 8] 

[0 4 5 9] 
[f 176] 



k=m+1+Z ^^"^ m+T g = ^ a 1 , b=0,1 



[0 4 6 0] 

[0 4 6 1 ] 
[#177] 



9 C|0 = Hash(E,G, [Y\ k y V* Cl0 } b=0>1 ) mod q 

0l Ck)= e Ck3 ~ e °Ck] mod£ l 



[0 4 6 2 ] 

[0 4 6 3 ] 
[»17 8] 



k=m+1+ I jg =1 a ~^0 »»-.m+ 1 £ =1 a I jg . b=0,1 



[0 4 6 4] 
[0 4 6 5] 
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[mi 7 9] 

[x~"b Ck3 ]G = [eb [k;]]Y ~b w+Y ~.b [k:) 

Y °Ck] +Y ~ 1 CkD =H 

[ 0 4 6 6] 

wis. y> 2:0 i t mm-t -s o 

[0 4 6 7] 

[SOEJfiC] 
BE W# 
[ 0 4 6 8] 
[mi 8 0] 

u a 

[ 0 4 6 9] 

14, <£T?>k=l m, ^tOe=0,ltlLT, 

[0 4 7 0] 
[^1 8 1 ] 

r<af)e0 CiO e z/c ^ z 

[ 0 4 7 1 ] 
[ 0 4 7 2 ] 

m 1 8 2 ] 

F(af)£0 Ck] = t r ' (a?)£ WG 

F<«)e1 w =|>Kaf)Bl C|j]( Yl ra -Y0 |:0 ) 
F <cr)e2 CiO = ^ a)e2 CiO^ Yl a3- Y0 03> 

[0 4 7 3] 

[0 4 7 4] 

[0 4 7 5] 
Itl 8 3] 



e(«) [l0 . = Hash (E.G. { C<*)bc e ^ D ( a )bo e ^ { p(«) E 0 [k] , 

F ( a ) £ l [k>F (ar) E2[k>}k=1 m;£=ai) 



[0 4 7 6] 
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[0 4 7 7] 
[0 4 7 8 ] 

mi 8 43 

r <a)E [l0 = 0(a) Ck] r(^)£ Ck] v<«)£ Ck3 mod q 

[0 4 7 9] 

SEWtt, k-l,...,mRO r e-0,l£W1-S 
[0 4 8 0] 
[mi 8 5] 

F < a) £ 0 C|0 , F ( or ) £ 1 Ck> F ( or) e 2 [k> r »( or) £ [k] 

[0 4 8 1 ] 
[0 4 8 2 ] 
[0 4 8 3 ] 

flttEi&tt, ft^D^-g-^-rtLCO e =0, K XO f k«l,...,mfcHLT, ^TOb,oO,li:Wti 
[0 4 8 4] 
[»18 6] 

c (a)bc £ Ck;j 

[0 4 8 5] 

[0 4 8 6 ] 

[0 4 8 7] 
[tl8 7] 



e(«) Cl0 . = Hash (E.G, { C<«)bc £ [k> D «*)bc £ ^ ^ m;bc £=Q .,, { F<«>* 0^. 

.,m; £ =0,1 ; 



[0 4 8 8] 

Sr^*i-4o t<t©k=l,...,mlO !, e=0,lS:iLT 
[0 4 8 9] 
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[R18 8] 

[r'< « > e Ck] ]G = [ 0 ( a ) [k] ] C ( « >00 e [k] + F< « ) e 0 [k] 

[r'<a) ^ [ k ]]< y1q 3 -Y°Q3)=[0 (a >c k ]] (D(a)01 e Ck;] - D (a)00e [l0 ) + F(a)E2 [|0 
[r »(a) £ M ] ( Y 1 [0 -Y° [;a )=[0< af ) Ck] ] (D(a)lO e C|0 _ D (or)00£ [k) ) + iKtK)£l (k] 
(D (a)11 £ [|0 _ D (ar)10 £ ^ =( D ( or )01 £ [|0 - D (a)00 £ ^) 
[ 0 4 9 0] 

[0 4 9 1 ] 

[g!)|B&D] 

iEBJ#(ft##)ua tt, ^TC0k=m+l m+n, ^T^b, e-0,l£HLt\ 

[0 4 9 2 ] 
[f 18 9] 



r ' Ca)b Ck] G z/c * z 



[0 4 9 3 ] 

[0 4 9 4 ] 
[119 0] 



F (a?)£0 [k] =[ r ~<Qf)£ m ]q 

F(«)e1 Cl0 = [>^a)e [|J ] 0Tl ClO -Y^ Cia ) 



[ 0 4 9 5 ] 

ttWk*l i+nCUtT 

[ 0 4 9 6 ] 

mi 9 1 ] 

0 ( * > Cl0 . = Hash (E.G, I C( «» e ^ D ( a )b £ [k> F C of )b £ [|0 ^ m+n;b £=q 0 

[0 4 9 7] 

2>o 
[0 4 9 8] 

^rT^k=m+l, . . . ,m+n, ^TOb, e-0,li:HLT f 
[0 4 9 9] 
[tl92] 

r ~"(or)£ = 0(a) [k3 r~(a>£ [l0 + r ~'<a)e [k] mod q 
[0 5 0 0 ] 

I#I4, k=m+l,... > m+n^^e=0,li:lt* 
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[0 5 0 1 ] 
[1193] 

[ 0 5 0 2 ] 
[0 5 0 3 ] 

±mmw<7)m£-ftm$&T<Dm ^ 0 tkm^iz, maK^^M « =o, u Rifk=i, 

[0 5 0 4] 
[»:l 9 4] 

c(«)b £[k] 

[0 5 0 5] 

|t) cfit-e^ •?> ci t iWR-t & o 

[0 5 0 6] 

[0 5 0 7] 
[tl9 5] 

fl(«) Cl0 . = Hash (E.G. [ C(«)be Ck> D («)b£ Ck)i F CoOb £ [|0 Wl ^ £=01 ) 

[0 5 0 8] 

Z 0 
[0 5 0 9 ] 

"T-<T<7>k=m+l m+nS^e=0,l^iL"C 

[0 5 10] 
[IU 9 6] 

[r ~"( a ) e C|0 ] G = [ e ( a ) C|J ] c ( a )0 e ^ + f< a ) e 0^3 

[rMor) e C|0 ] ( Y~l a] -yHoXfllay (D(«)1 « Cld -D(«)0e [k) ) + fC«)e l w 



[0511] 

[0 5 12] 

[SUKii&E] 

a=l A KHLTJE*^ ft## 

[0 5 13] 
[«[19 7] 

[0 5 14] 
[0 5 15] 
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[^1 9 8] 

u oi 

[0 5 16] 

[0 5 17] 
[»C 1 9 9] 

Z h=0.1/3.2/3 ° (a ~ h)b ^u,v,£=s (a)bc ikU,V.£ modq 
*h=0.1/3.2/3 ^"-^P^lkU.V.^^^^U.V^ mod < 

[0 5 18] 

[0 5 19] 
[12 0 0] 

[cr^-^o Mfi v it V^)0bc Wti v 4>] ^ m;/8=1 A;h=2/31/ 

3,0;b,c,jU,Z/,£ <= {0,1} 



[0 5 2 0] 

£ Z/qZ^ ^ — MMftZ CI^, 
<£T?)k=l, . . . ,iik 
[ 0 5 2 1 ] 
[&2 0 1] 



b,c,j!i,z/,£ e {0,1 J 



[0 5 2 2 ] 
[0 5 2 3 ] 
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[Sfc2 0 2] 

A< a - 2/3 > bc C .0* ^^ = A Ca - 1)bc Ck ^ n ^(i).v^ + ^ (tt - 2/3)bc CkD//^^^ 
BCa-4A0bc M tf „ ^ = B ( ar-Dbc^ ^ Q x(0 y ^ + [ff («-2/ 

B (Qf - 1/3)bc [ k ^,v^ =B<«-2/3)b C|:k ^ >vn3cQU+ [a(«-V 
3)bc Ck^.i/^3(Yb Cir Yo ar z) 

c(ar-1/3)^ bc CR ^ v $ =c (a-2/3)P ^ WfltVOn(iU + [r(«-l/3)^ 
(Ybj-.-j+YCQ^+Z) 

A (a)bo Ck)/i. y ^=A<«- 1/3 > bc Ck ] JU .vn»0).f +Cor(flf)bo OOjH ,v 

B( a )bc Ck] W .v = B( a _1 /3)bc Ck} n ,v □ x (D.« + » ( a )bc CkDM , v^^b Ci]+ Yc Gr z) 

G<a) * bc tk)^,£ =c(«-V3)/3 boQQ^^n^ ^"^M^.^G 

D(ar) ^ bc Ck^.y^= D(a; - 1/3 ^ bc DO^ ** ia ™ ho (tou.v.el 
(Yb CQ+ Yc Cjr z) 

[0 5 2 4] 
[ 0 5 2 5 ] 

^T(7)k=l ) ... > m, ^T^)jS=l A, <£TOh=2/3, 1/3,0, K^) 

[0 5 2 6] 
[S2 0 3] 

b.c.ju.v,^ €= {0.1} 

[0 5 2 7] 
[0 5 2 8] 
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[t2 0 4] 

[0 5 2 9] 

[0 5 3 0 ] 
[»2 0 5 ] 



b,c,v,v,£ e= {0,1} 



[0 5 3 1 ] 
[0 5 3 2 ] 
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[12 0 6] 

a<«-^ CIOx(Di ^ Vi ^a(^^ 

B<Qr-2/3)bc Ck:j7ra) :#Ciy ^ = BCar-Dbooj^ n7r(i)(I/(t+ [a<«-2/ 
3)bc CkD ^/ . z/ 3CYb ca+ Yo Cj]+Z ) 

C «X-2/3)0 *o Z[0mti v i =c(«-1)^bo Ck ^ n7r(i) j/ ^ +[r <Gr-2/3)/J 

D .«*-2/3)/J bc Ck ^ ( .^ v ^ =D ( a -1)^bc Ck ^ n7ra) j/ ^ +Er .(ar-2/3)^ 
bc Ck]/i,z/^^ Yb C0 +YC a3 +Z) 

B<«-1/3)bc Ck]7r(i)/i „ £= B < "-2/3*0^ >vn7[<ili +lcr«*-V 
C <a-U3)B *c M >c& u , v ,t =C<«-2/3>0 bc C|0ju tVDx0U + [r<or-1/3) * 
D < a -V3)0 bo C|JjcQ)j| y ^ D («-2/3)^ bo^yD*©.* 4tr<«-1/» /» 
A< a )bc Ck3 tt 00 /i . v = a< « " 1 /3)bc Ck)// . v □ * 0) .* + C * ' ( a )bc D0*.v.^Q 

B<af)bo oojcaoii.v.* = BC«-i/wbo Cl0|| >J/n ^ 0U+ 

C«r<«*« Ck3|l . Vif ]CVb t0 ^o C0 *Z) 

C (a) ^ bc Ck^(k)/i,v^ =c(«-i/3)^ bc [k:jju (I/n7r(j) ^ HT<«)flbo W/|>Vie]Q 
D<«>*»» Mx<W ^= bc mti j/ajcQl$ <T <a)0 bc^ y ^ 

[0 5 3 3 ] 
[0 5 3 4] 

$ e> i:^TWk=m+l, . . . ,m+n, ^TO /3=1, .... A . CO 
[0 5 3 5] 
[S2 0 7] 

b.^e {0,1} 

[0 5 3 6 ] 
[0 5 3 7 ] 
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[S2 0 8 ] 

[ 0 5 3 8] 

£Z/qZ/^ «b — tt&fHSfr K jgtf, 

^: "C CO k=m+ 1 m+n,&X<D 

[ 0 5 3 9] 
[1 2 0 9 ] 

b.£e= {0.1} 

[0 5 4 0] 

[ 0 5 4 1 ] 
[12 10] 

A<a)b CkD7r(k).^ = A (a - 1)b Ck^n7r(k) + [ s ' Cfl?)b Ck^]G 
B ' (tt)b Ck] tt (k)^ = B (a " 1 > b W £ Q 7r(k) + k ,(a)b Ck^KY~b Ck}+ z) 
C' ( « b Ck3 7T (k) £ = " 1 > * b Ck] £ □ 7T (k) « b C lO* ]Q 
D' (Qf) ^ b Ck] 7T 00*= D(Q; - 1)/3 b Ck] * □ 7T (k) H-[t< b Ck ^ ](Y ~b Ck]+ z) 

[ 0 5 4 2 ] 

o 

§ fb £^TOk=l 1,^T<7> 

[0 5 4 3 ] 
[12 11] 

b,f£ [0.1} 

[0 5 4 4 ] 

[ 0 5 4 5] 
[12 1 2] 

s+ ' (ff)b Wf 

[0 5 4 6 ] 

* Z/qZfr lb -»*ftffcft CIV, 

^t©k=l \,&X<D 

[0 5 4 7] 
[12 1 3] 

b,|6|0,1} 
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[0 5 4 8] 

[0 5 4 9 ] 
112 14] 



At ' ( a)b Ck] tt Ck)£ = At(or-1)b Ck] ^ □ 7T (k) + Cst<or)b CkK]G 

b Ck] £ □ 7r(k) + fe"*^ a)b ClO £^ Yb Ck) +2) 

[0 5 5 0] 
[ 0 5 5 1 ] 

£XtDk=l,...,m, <£TOh=2/3,l/3,CKCp| Lt, 
[0 5 5 2] 
112 15] 

0(a?) Ck]7r(i)ni' 



[0 5 5 3 ] 

£ Z/qZ^ <b K o 

[0 5 5 4 ] 

^t^)k=l :£TO/?=l,..., A, ^TO 

[ 0 5 5 5 ] 
[12 1 6] 



b,c,^,^,<f e [0,1} 



[0 5 5 6 ] 

[0 5 5 7] 
[12 17] 



a .< a -2/3)bo Ck) ^. cr"( a -1/3)bc (k) ^c^^, a-C-Jbo^ 

7r0)O1, iU.J/.^- ^ ,<Qr)/3bc Ck] *(k>niji.v.£ 



[0 5 5 8] 

£ Z/qZ/5- <b — KM&o 
[0 5 5 9] 

^TOk=m+l m+iu ikX<D /3=1, .... A ^ ^t© 

[0 5 6 0] 
[12 1 8] 



b,£ e {0.1} 

H 

[0 5 6 1 ] 
[0 5 6 2] 
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[t2 19] 

s " (a)b Ck] 7r(k)D1^.t" (0f) ^ b W 7r(k)D1.4- 

[0 5 6 3 ] 

£Z/qZ^ h -m&<fe% KMJ& 0 

[0 5 6 4 ] 
[»2 2 0] 

b.£e {0,1} 

[0 5 6 5] 

[0 5 6 6 ] 
[#221] 

s + ' <Qr)b [k) xOODL-f • t ' Wflr)b 00 *00D1.* 

[0 5 6 7] 

t Z/qZ ;&» «b — CI^o 
[0 5 6 8] 

#c£, ^TOk=l m, ^-C©/9=1, .... A, ^TcD 

[0 5 6 9] 
[12 2 2] 

b.c^/.i/.^ e {0,1} 

[0 5 7 0] 
[0 5 7 1 ] 



mSEiff 2004-3077570 



#11 2004-016881 



: 54/ 



[f2 2 3 ] 

A<ar-2/3)bc [l0 x(Dniifl . Vi *i[a««-*>»bo Cl0 n(i>ni.u.i,.ito<° ia \k-)x(mJ 

c 0(af) Ck]7c(i)ni]B(«-i^ W/ , n7r(iXl/ ^ 

c-Ca-2/3)^ b C(:k3 wa > nuiil , t s«[T-<«-8/»* bc [k3 ^^^q- ■ 

"^'OOXCODI^*- 1 ^^ /i □ 7t (i). v , £ 

D <*-2/3)0 bo M l(0D1i/1J/ ^ = [r «ar-2/3)0 bc^ ^j,-,^^] 
(Yb [a+ Yo a;|+ Z>-[e(«) Ck37r<i)at ] D(a-1)^bc [k ^ n7r(i) j/ ^ 

A'(ff-i/3)bc [k:| jra)ni . |liVi ^-Ca-<«-i/a)bo od ^a^^^lG- 

B <a-l/3)bc [k] ^ G)D1 ^ (I/ ^ =[a'<«-l/3)bc [k] 7r(j)D1 ^ v ^ ] ( Y b [ . rY o a3+z) _ 
[ ^ ( a) Ckl n<i)nJ B( a " 2/3)bc CkD ii . v □ xfl).« 

c<«-i/3>* bc [k;) ^ )nii/i>J/ ^=Cr'<or-1/3)^ bc^ , 0)niJi !/ | ] G - 
£ 0(a WG>ni3c<*- 2 / 3 >0 b * C k3 , v □ 7r 0), £ 

D -(ar-1/3)3 bo [k] x(Dn ^ tVf€ =[r'<a-1/3)^ bc^ ^ )D1>JU>I/ ^] 
(Yb Ca+ YO ar Z)-[0(o f ) [k:i3r(j)nt]D (a r -2/3)^ bc [k] u l/Dn(iU 

A<ar)bc Ckl 7r{k)D1,,i,v,£ = ^" (a)bc Ck3 3r(K)Di./i.v.*3G-C eCflr> Ck3?c(lOni3 A(a " 
1/3)bc Ck3 u,v.£ Dn(k) 

B<af)bc Ckl ttOODI^^.^ =[o-"<<*>bc [k] ^(loai./i.z;^]^^^)- 

c (a) * bc DO ^(k)ni, W(I ,.e=^" <ar ^ bc Ck] ^(k)Di^.v^^-[0 <a) ck^(k)ai] 
[^«\k]^(k)ni]D (Qf - 1/3 ^ bc cw u.v.tnxto 

[0 5 7 2 ] 
[0 5 7 3 ] 

^"COk=m+l m+n, ^-CCD/?=1 , A, ^T<7) 

[0 5 7 4] 
[^2 2 4 ] 

b,£e {0,1} 
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[ 0 5 7 5 ] 

[ 0 5 7 6] 
[»2 2 5 ] 

A' (a)b Ckl 7r(i)Di,^ = ^' (ff - 1)b Ckl ,ca)ni.<» -t e(a?) Ck3 7r(i)Dl] ACa-Dbpj 

^ a ttO) 

1>b Ck3 

c< ff ^ b w 7r<i)oi^=ft" (ar - 1 ^ b Ck3 xa>ni.f] Q -c° (a) oox(oni3c (a - 1 ^ b Ck] 

D ,(a) * b CO 7r<i)ni.^=ft" <ar - 1 ^ b Ck) K(i)ni,^ (Y ~ b Ck] +z >-t 9(af) Ckl;r(i)ni] D(a " 
1) ^ b Ck] 

[0 5 7 7] 

[0 5 7 8] 

^T©k=l U 

[0 5 7 9 ] 

[85:2 2 6 ] 

b,fe {0,1] 



[0 5 8 0] 

[ 0 5 8 1 ] 
IB 2 2 7 ] 

A t,(ar)b Ckl *<i>ni,£= ^ + " (Qf - 1)b W *(0DUl G ^ (a WcDDi^ A««-«b Cl0 
1>b Ckl ^ □ 7T (i) 



[0 5 8 2 ] 
[0 5 8 3 ] 
[0 5 8 4] 
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[tfc 2 2 8 ] 
S = { E,G, 



h)/Jbc CkK,^.£ 

k=1,...,m;h=2/3,1/3,0;£=1 A; b.c./U ,V ^{0,1} 



A ' (a)b Ck]^^'B<«)b [kK ^,C<or)^b [kK ^.D<O f )^b [kK ^ 
k=m+1 m+n;^=1 A;b.£.£ e{0,1 } } 



At(«)b Ck ^ >B t(«)b [kU 

A+,(a)b CkD4r^- Bt<ff)b CkK^ 

k=1 I;b,£,£e{0,1} } 



[0 5 8 5] 
[0 5 8 6 ] 

f±. ^t«k=l mrflLt 

[0 5 8 7] 
[12 2 9] 

0(Q?) Ck] =Hash(E.G,k, S) 

[0 5 8 8] 

[0 5 8 9 ] 

^-Ccok=l,...,m+n^HLT 
[0 5 9 0 ] 
[12 3 0] 

0(a) Ck]7r(i)^ (af) Ck3- 0(Qf) Ck]7r(i)D1 
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[0 5 9 1 ] 

o >kK, ^TOW ^ ^TOiJ.l A, ^:T(75h=2/3,l/3,0> ^TO 

[ 0 5 9 2 ] 
[12 3 1] 

b,c, e{0,1} 



[0 5 9 3 ] 

cut, 

[0 5 9 4] 
[ft 2 3 2 ] 

^" (0? - h)bc [k^(i)^.v^ = ^ (ff - 2/3)bc Ck^.z/.^ + ^ <a - 2/ 

r-Ca-W^bo Wjt(a ^ t|r ^ = 0<*Wo) ^ (a; - 2/3 ^ ■"DO*.*.* + r 
3c Ck)^,v,£ modq 



[ 0 5 9 5 ] 
[ 0 5 9 6 ] 

£TOk=m+l m+iu ^T© £ =1 A, ^t© 

[ 0 5 9 7 ] 
H&2 3 3] 

b,£ S {0,1] 



[0 5 9 8] 

[ 0 5 9 9 ] 
[»2 3 4] 

s " (0?)b C«7r(i)^ = ^ (a) CkD7rO) s(a? " 1)b Ck^ +-<«-l»> Cl0 ^ mod q 

t" Ca) ^ b Ck]7r(i)^ = * (a W<O rfflM)/,b Cia* + f (a - 1)b [ k ]^ modq 
[0 6 0 0] 

[0 6 0 1 ] 

•dfcC ^TOk=l U ^T© 

[0 6 0 2 ] 
[12 3 5] 

b,£e {0,1} 

[0 6 0 3 ] 

CULT, 
[0 6 0 4] 
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[12 3 6] 

st " (a)b Ck]7r(i)^ = ^ (Qf) Ck]7r(i)- t(a - 1)b Ck^ + « t,(af - 1)b Ck]^ q 

[ 0 6 0 5] 

[ 0 6 0 6 ] 

[0 6 0 7] 
[12 3 7] 

k=1 m;h=2/3,1 /3,0; £ =1 A ;b,c, V,V, {0,1 } 

[0 6 0 8] 

[0 6 0 9 ] 
[12 3 8 ] 

A (ar-h)bc Ck ^ v ^ (B ( a -h)bc [k ^ ^^,c(a-h)^bc Ck]jU y ^, D (ar- 

A< a - h)bc Ck] * .ii .v .4 • B<«- Wbc C lO £ ./i . * ■ c ' ia ~ h)P bc CkK^,v,^.D' (a - 
h)/Jbc [kK,tf.v,£' 

CT " (a)b CkK.f ■ ^ <Qr) ^ b CkK,^ 
[0 6 10] 

[0611] 
[12 3 9 ] 

k=m+1 m+n; £ =1 A ;b. £ , £ e{0,1} 

[0612] 

[0 6 13] 
[12 4 0] 

A(ar)b [k:i ^,B(«)b CkU ,c(or)^b Ck ^, D (a f )^b [kU , 

A< a)b CkK B< «> b CkK ,£ . C< b [kK ^ . D < or)* b CkK ^ , 

s " (a - h)bc CkK.^^^ t,<0f - h ^ bc CkK,/i^^' 

[0 6 14] 
[0 6 15] 
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112 4 1] 



k=1 1;b,£,4;€={0,1} 



[0 6 16] 



[0 6 17] 
[S2 4 2] 



At-(ar)b 



, et'(a)b 



s t"(a?-h)bc 



£T(7>k=1 m+n [C||-r^ 



0(a) 



[0 6 18] 
[0 6 19] 
[0 6 2 0] 
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H6fe2 4 3 ] 
S = t E.G, 

[ 

A (a? - h)bc Ck3/i.v^.B<«-h)bc Wju>l/ ff .o(«-h)/Ibo Cl0<< ^.oCar- 

h)/Jbc tkK.^.£ 

J k=1 m;h=2/3,1/3,0; £ =1 A ; b,c, # , V . £ , £ e{0.1> 

{ 

A( ff )b Ck] 4 ■ B( a )b Ck] £ • c< a )/J b Ck] 5 ■ D( a ) * b 00* • 

A' ( a)b CkD £ .* ■ B ' ( a)b CkK .4? • c< a )/J b CkK • D' ( b Ckl^ 

} k=m+1 .....m+n; £ =1 A ;b.<£ .£ e={0.1 } J 

t 

At ' (a)b CkK.^ Bt,(ff)b CkK^ 
k=1 l;bi,^e[o,1]l 

[ 0 6 2 1 ] 

fc&J&U 14, ^T«k=l m+nCMLt 

[0 6 2 2 ] 
[i2 4 4] 

0(tt) Ck) = Hash(E,G,k, S) 

[0 6 2 3] 

&£J8U ^TOk=l ni:HLT, 

[0 6 2 4] 
[»2 4 5] 

[0 6 2 5] 
[0 6 2 6 ] 
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[%2 4 6] 

k=1 > ....m;h=2/3,1/3,0;£ =1 A ;b,c, U , V . £ e[0,1} 

[0 6 2 7] 

[0 6 2 8] 
[12 4 7] 

[ff ..(a-2/3)b C|:kKji y ^]G = [0(«) [ku](A ( a -2/3)bc Ck:ijU >y (tf -A<«" 
1 )bc 00 □ 4- . v. & " A ' ( a _2/3)bc 00* . * . v . * 

[a ..( a -2/3)bc CkKi// ^ ^](Yb Ci]+ Yo Qr z) = [0(ar) CkK ](B(«-2/3)bc Wj[/ y ^_ 
B ( * ~ 1 > bc 00 /i □ £ , V . "B< a " 2/3)bc 00* , m ,v 

[ x -( a -2/3) 0 bo C(J ^ ^ y ^ ^ ] (Ybfij+YC^^Z) = [ 0 C a > C|0 ^ ] ( D ( a -2/3) 0 
bc OO„ ,v ,i - D ( a - 1 b ' c 00 #i □ £ .v .* >" D ' C «~2/3^ b"oo* i#|>y># 

[irK«-i/^ M ^ >tfty ^]Q-[0(a) wt 3(A<«H/»ta M/<iK># -A(«-«/ 
3)bc 00 * □ £ . „ , * ) ~A< « " 1 /3)bc 00 * . n . v . < 

[cr ..(a-1/3)bc M4 . ^ ^ ^](Yb Ci]+ Yc a]+ Z)=[0(a f ) CkK]( B(Q f -2/3)bo [ . k:i/i y f _ 
B ( or-2/3)bc [k3 tf D ^ v ^ j _b< a -1/3)bc M ifivi 

[Z '<a-V3)$ ^ CkK(JU>1 , (<e ]G = te< Qf V:4-^ c(Qr " 1/3) ^ bc CkD/i,v.^- c(Qf " 2/3) ^ 
bc Ck) n □ £ . * .«> - c< bc CkD£ . » , v .6 

I x -( a -1 /3) B bc [|0 ^ ^ ^ ^ ] (Y b c . :|+ Yc c . ;j+Z ) = [ 0 ( or ) [kK ] (D ( a-1 /3) ^ 
bc CkD^^.^-^«- 2/ 3^ bc Ck3^n^.v^>-D< a - 1/3 ^ bc 00£.*.v.£ 
[o-"C«)bc Ck] ^ ^ ^^ ]G = [0 (ar) CkK]CA (or)bc [k3w y ^-ACar-1/ 
3)bc 00 ii □ £ ,v > <* )bc CkK .n .<? 

^" (ff)bc Ck)e .i, .*]Wb C0 +Y^ r Z> = [0C«) Ck)t ](B(«H/3)bo |M/||Vif -B(a-2/ 

[r-C«Wbo w ^ ^ „ ^]G=[0<ar) CkK ]( C (ar)^bc Ck:jj[/ ^ ? -c(ar-1/3)0 
bc Ck3//D4:,v^>-c< a ^ bo CkK.iU.v^ 

[r .<a)^bc [kU >#J v ^]<Yb m+ Yc O3+ z) = [0(«) [kK 3( D (a)^bc Ck3w y ^_ D (or-1/ 
3) * bo 00jint. y .£^ a)flb °00*.|f.v.« 
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[0 6 2 9 ] 

[0 6 3 0] 

[0 6 3 1 ] 
[12 4 8] 

k=m+1 m+n;j8=1 A;b,£,£ <={0,1) 

[0 6 3 2 ] 

[0 6 3 3] 
[«fc 2 4 9 ] 

01 )b Ck3 e 3 (Y~b [l0+ z) = c e ia > M e ] cbc «* ci0 ^ - B ( «-i >b ci0 ^ n ^ > - 

B ' (a)b CkK,£ 

&<«>^b Wfif]Q « [ a(a) wt ] ( c(a>^b Da ^- 0 (cr-l)^b OJ ^ nf )- 
c ' (a) ^ b Ck)4:^ 

[t«<*>/Jb Ck] ^ ](Y ^ Ckr z^^ 
D ' (ar) * b [kU,£ 

[0 6 3 4] 

[0 6 3 5] 

Mfc2 5 0 ] 

k=1 I;b,£,£ e {0,1} 

[0 6 3 6 ] 

[0 6 3 7] 
[12 5 1] 

[st»(ar)b CkU = [e(«) CkK ] (At(«)b [k ^_ A-K«-1)b CkK n ^> -A««X» [kK ^ 

"> Wa *Daf.*3 <AW +Z > = Cfi <af) 0O43 <BtC«)b [k ^- Bt<or-Db [k ^ 
B ' (Qr)b Ck]<r.£ 

[0 6 3 8] 

[0 6 3 9] 

[sme&F] 

[0 6 4 0] 
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[S2 5 2 ] 

u a It, ±T<Dk=1 m+n, ±X(Ob,c e (0,1} 

[ 0 6 4 1 ] 

[ 0 6 4 2 ] 
[*2 5 3] 

{u Qf } Qr=1 A 

[ 0 6 4 3 ] 

[ 0 6 4 4 ] 
lt2 5 4 ] 

Z '(«) e R Z/qZ 

[0 6 4 5 ] 

[0 6 4 6 ] 
[12 5 5 ] 

Z'(ar) = [ z '(a)]G 

[0 6 4 7] 

^"C©k=l m, ^TO 

[0 6 4 8] 
U&2 5 6 ] 

b.c e {0,1} 

[0 6 4 9] 

[0 6 5 0] 

[Sfc2 5 7] 

A .(A) a bc Ck)000 = [2 .( Q r) ]A (A)bc Ck]000 
C< A ) or 0 bc [k;j000 =[z < or ) ]C ( A ) or bc C|0ooo 

[0 6 5 1 ] 

£^J&U ^:T<7)k=m+l ,m+n, &X<D 

[0 6 5 2 ] 
[12 5 8] 

b e {0,1} 

[0 6 5 3 ] 
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[0 6 5 4 ] 



[S2 5 9 ] 

A< A > ab M o=b< ar >]A<A)b [k; , 0 
C'( A ) or /? b [k;)0 =[2 .( a )] C ( A ) a b [k]0 

[ 0 6 5 5 ] 

L> ^t(Ok=l K -£T?> 

[0 6 5 6 ] 
[12 6 0] 

b e [0,1} 

[ 0 6 5 7 ] 

CWLt 

[0 6 5 8] 
[»2 6 1] 

A t<A)Q f b Ck3o = [z .( a )]At(A)b (;k)0 

[0 6 5 9] 
[0 6 6 0] 
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i9k 2 6 2 ] 

S = ( I A< A )bc Ck;)000 , c( A ) P bc^-,^ } k=1 m . b c=0 ^ . ^ =1 A 

{ A( A )b Ck;}0 , C ( A ) £ b Ck;)0 ] k=m+1 m+n . b=01 . ^ =1 A , 

lAtCAJb^^ |;b=01 , 

{ A«A)flfbc [|0000i c«A)« flbo^^^ 

.,m;b,c=0,1;j5=1 > 

( A«A)orb [k:)0i c *(A)ar beta b^^ m+n; b=0,1 ; =1 A 

[AtKA)«b C|J0 ^ );b=01 , 
tZ<a)}, 

..m;b,c=0,1;£=1 A 

{ A < A ) a b^, c< A ) a ^ b C|0o } k=m+1 m+n;b=0 A . ^ =1 A . 

<A«A)crb CiaoWl 1:b=01 .. n 

[0 6 6 1 ] 

[0 6 6 2 ] 
IWC2 6 3] 

0 = Hash(E,G, S) mod q 

[0 6 6 3 ] 

[0 6 6 4] 
It2 6 4] 

z »(a) = z CQf)0 + z <«)modq 



[0 6 6 5 ] 
[0 6 6 6 ] 



#11 2004-016881 



t—i?: 66/ 



V».2 6 5 ] 

z < or ), ( a< A ) a be [lO000 . c( A ) a ft bc^^ ^ 

.,m;b,c=0.1;j8=1,...,A' 

lA<A)ab [k;j0 , C<A)ar0b [|Oo } k 

=m+1 m+n;b=0,1 ; yS =1 A ■ 

tAt<A)«b [|0o)k=1 |;b=01> 

z -( a ) 
[ 0 6 6 7] 

[0 6 6 8 ] 

[0 6 6 9] 
[S2 6 6] 

S = { { A ( A )bc Ck:)000 . C C A ) ^ bc Ck;i000> ) k=1 m;b c=Q (1 . ^ =1 A , 

t A( A )b Ck]0- cU } * b Ck]0 U+1 m+n;b=0,1 ; j8 =1 A • 

t At(A)b Ck]0lk=1 1;b=0.1- 

{ A *( A ) or bc [k;|000> c*C A ) a 0 bc^^ ^ m . b c=Q ^ . ^ =1 A . 

I A* A ) or b [k> 0 « A ) a 0 b^ ) k=m+1 m+n;b=Q t . $ =1 A , 

tA t+(A)«b Ck]o)k=1 1;b=Q1> 

[z <a\ 

t A< A)«bc Ck3000( c iX)a0 bc [|O000 ^ 

.,m;b,c=0 T 1;£=1,...,A' 
{ A < A ) « b [k]0> c < A ) Of * b^^ ^ m+n . b=() ^ . ^ =1 A , 

tAt<A)«b Ck;)o)k=1 |;b=01 ,. }} 

[0 6 7 0] 

[0 6 7 1 ] 

W.2 6 7 ] 

0 = Hash(E,G, S) mod q 



[0 6 7 2 ] 
[0 6 7 3 ] 
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IS2 6 8] 

[ 2 "(a>]G = Z<a)+[e]Z<aO 

[ 0 6 7 4 ] 

[ 0 6 7 5] 
[& 2 6 9 ] 

k=1,....m, b,c e [0,1}, /?=1,.„,A 

[0 6 7 6 ] 
tilt 

[ 0 6 7 7 ] 
[&2 7 0] 

[,"(«)] A ( A)bc [k3()00 = A < A)abo [|0M0 A « A)Ofbc [k]000 
[ 2 "( or )] C ( A ) 0 bc^ QO0 = c < A ) a 0 bc^^ +[ 0 ]C =K A ) a /? bc Ck]000 

[0 6 7 8 ] 

[0 6 7 9] 

Wfe2 7 1] 

k=m+1 m+n,be {0,1}, jS =1 A 

[0 6 8 0] 

[0 6 8 1 ] 

[§&2 7 2] 



[z"< « >]A< A )b [k3o= A < A ) a b [|0o +[ 0 ] A t( A ) or b [k;]0 

[ z >< ar)] C ( A )£ b C|0o = G < A ) a 0 b [k]0 +[ e ]C *C A ) a $ b^ Q 

[ 0 6 8 2 ] 

[0 6 8 3 ] 
[t2 7 3] 

k=1 1, be {0,1} 

[0 6 8 4] 
[0 6 8 5] 
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[12 7 4] 

[z'< <* )]At( A )b [k]0= A t'( A ) a +[ 6 ]Att( A ) a b [k]Q 

[0 6 8 6 ] 

[0 6 8 7] 

[glJSBifcG] 

[0 6 8 8] 
[^2 7 5 ] 

[0 6 8 9] 

(± 

[0 6 9 0] 
[^ 2 7 6 ] 

z< a "> e R Z/qZ 

[ 0 6 9 1 ] 

£H$&ffc&fc&J£U ^T<75k=l lie HI L"C, 

[0 6 9 2 ] 
[Ifc 2 7 7 ] 

At Cl0 = [y<«)iAibrkJ Cl0 

[0 6 9 3 ] 

[0 6 9 4] 
Iic2 7 8] 

8=^%^ 

tA^Ck]^ Y 

tAt' Ck] }K =1 ,1 

[0 6 9 5] 

[0 6 9 6 ] 
[Sfc2 7 9 ] 

0 = Hash(E,G, S) mod q 



[0 6 9 7] 
[0 6 9 8] 
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[»2 8 0] 

Z "(a)= 0 z (af)+z<tf)modq 

[ 0 6 9 9] 

[0 7 0 0] 
[1281] 

[0 7 0 1 ] 

[0 7 0 2 ] 
[12 8 2 ] 

s={[Atbrkj Ck]}k=1 

t At *Cka lk=i i- 

( At 'ooWi ii 

[0 7 0 3 ] 

IT, 
[0 7 0 4] 
[8fe2 8 3 ] 

0 = Hash(E,G, S) mod q 

[0 7 0 5] 

[0 7 0 6] 
[&2 8 4] 

[z-Ca^AtbrkJ^ = + [0] A t+ Ck3 

[0 7 0 7] 

[0 7 0 8] 

«^!I2 

[0 7 0 9] 

#*JfrWfc::&V»TM\ HI 1 4 H^-T £ 3 ^fHt«11140l36«NlB* «5 . ^tL^tLff#^®l 

iaffiO»^±, Un©*£Uo 
[0 7 10] 

ffi!E# 2004-3077570 
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[0 7 1 1 ] 

ft#^^14010Uii±DATAo 0 ^ftffi-2>o rojggOftfrj t J: ^5 (1701) o 

[0 7 12] 

[0 7 13] 

Ui iiDATAo 0 ^ DATAi 1 £ftlf LT, DATAi 1 &U 2 (1711) 0 

[0 7 14] 

£lfe (iDATAi 1 DATAi 2 * ft* L , DATAi 2 £Us 1 36 S (1712) 0 
[0 7 15] 

VXTMKr-? *m-oXft£, Un liDATAi^ 1 ^ DATAi N *th#U DATAi N £lh (1 
710) o 

[0 7 16] 

&k r~m i ottjtj *tf^o 

[0 7 17] 

Ui DATAi N DATA 2 1 ^ftff L T , DATA 2 1 £U 2 JCSfe & (1721) 0 
[0 7 18] 

#C fclfe (±DATA2 1 <b DATA2 2 * ftlt L > DATA2 1 * Us \Z *k %> (1722) 0 
[0 7 19] 

? fcES-oTfr^ UNi±DATA 2 N " 1 ^<bDATA 2 N £ffi¥ U DATA 2 N fcUi KM* (1 

720)o 

[0 7 2 0] 

mz r-msmtm *ftvo 

[0 7 2 1 ] 

Ui J±DATA 2 N ^ t> DATA3 1 BtILt, DATA 2 1 SrlfeKj&S (1731) o 
[0 7 2 2 ] 

^TJH^x-^ *^oT^Ti> UN^DATAs^^^DATAs^ft^bl^x./c^ d^T^n h 
[0 7 2 3 ] 

[#ff#^«1401OAmtJ] 

^_t#wj|[Siflii4oi©^«jflJii)i-4'7*-^wAHi**ia 1 4 zmzLxmm~f&o 

[0 7 2 4] 

#tHt»«140im±, EE&01*$&1404, & £Zfm&<DUftXJ3U02tfXtlZtl2>o 
[0 7 2 5] 

i r-eti. |!Ii^O«#1404^i-|IIJ6&OAll*TO^O*^Ofan-inOm^2-e^^>^r 
[0 7 2 6 ] 

HU^OA^J^w^OA^JbwtiUis • UnOV^-T tL^^®M^Bf*LTV^ i>coti~ 
& 0 Ui<7)*£Un + i t ttmOHZ-t&o 
[0 7 2 7] 

Ui jFIBaFSfcjfr* LTv> * AtJ tf y h «>Jia**IlIKoW5-X*l402T?* & » 
[0 7 2 8] 

@S&O'|f$Hl404/5^1-|ag&OA^«?-i*. V»*ft4WA9Ttli,tlii3tJt4*-F 
/*fcSv>]tLfciaK«rJ0LTC[l]fc^o 
[0 7 2 9] 

[0 7 3 0] 

*^wO£T, ^TOfan-in^^-tL-ftLL(w), R(w)i:t<*tt4o 
[0 7 3 1 ] 

ffifE# 2004-3077570 
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#lt#^gl40Hi|IIff-&^'lf*1404, £ i£f|Ilf&Oil$^A;(:l402^A;tl£tL^!b, *-fUi 
[ 0 7 3 2 ] 

lJ^g, 2J1@, 3jai^tf#"CWAtii^t±TO07*-^fllj£S:^oTV>S 0 i=l,2,3 

o---^Ui^ijli<7)ft«:trUi + iH3i#i-^T ? -^^DATAi 1 fc^et^K-r&o DATAi-i N £D 
ATAi° t 

[0 7 3 3 ] 

* fc, IHOJi i <^ft#-C-Ui *«ff o fctr#<BttiM&**DATAo 1 fc # < o 
[ 0 7 3 4 ] 

DATAi 1 {± , DATAi 1 =DATAi 1 " 1 II BODY; 1 I I PROOFi 1 II SIGi 1 t ^7 LT V>* o 
[0 7 3 5] 

DATA; 1 " 1 ttUi - i ^ frT § ^ y -fe- >>\ BODYi 1 ti ^ ? -fe - y©W, PROOFi 1 i±B 
ODYi 1 OiE^ttiEWi:, SIGi 1 fiUi CO DATAi 1-1 II BODYi 1 I IPROOFs 1 KMir £ M&o 
[0 7 3 6 ] 

1MB, 2 ME, 3^@Oft#0$P&£m^-f &o 
[0 7 3 7] 

m m a ^ft# t~ * ^ -c , m i± 4 -r data s 1 - 1 *ui . 1 ^ t s w a (isod 0 

[0 7 3 8] 

(—Ml g CDUi <Z> * tifllfl-ftj g o 7"- * DATAo 1 ^ ) o 

[0 7 3 9] 

DATAi 1 - 1 tt^tfWo tz h > Ui (± jiCPROOFi 1 , PROOFi - 1 1 Z&xmEIr & (15 
02) o ^LT^KUi JiS^lfcSIGi 1 , SIGi~i l £<£T*ME1-£ (1503) o 
[0 7 4 0] 

*lJSi©ft#t, L^^l=l<75l#^-o^l504Oft#^tf 5fcfcUi ttSUfifc&JSfcfr-S (1 
505) o 

^LTUifi^coam^ffl^-C^tt-^^r^fv^ BODY; 1 SrftjSt* (1506) o #tm*»x.rt: & 
Ui JiBODYi 1 O iE^ttiEWOTfiOOFi 1 Sr^f * (1507) 0 * L T Ui iiDATAi 1 " 1 II BODYi 1 I I 
PROOFi 1 HM-t^^^^SIGi 1 &ffrjTr& (1508) o 
[0 7 4 1 ] 

*&£Ui iiDATA; 1 =DATAi 1 ~ 1 II BODYi 1 II PROOFi 1 I I SIGi 1 £Ui + i (1509) 

O 

[0 7 4 2] 

LIB-t] 

[0 7 4 3 ] 

[Bf-^^E[27]] 

G[l]£, T-^^^^DDHP^M«tv^^(Mx.tf*Pl#±O^Rffi^) fc U G[l] 
£>fe&£pfcU G[l]O3jP7c£0 fc*i"o 
[0 7 4 4] 

[0 7 4 5] 
[§&2 8 5] 

P[|0|] e G[1] 

[0 7 4 6 ] 

KStU (P[|0l],0)^B&lBLrmtcP[|0|]i:^L. g&fc 
[0 7 4 7] 
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[12 8 6 ] 

F p c B[12], G[1] C G[12B] 

[.0 7 4 8] 

t*4u G[i2B]±<^fn^j^^^>fn 

[0 7 4 9 ] 
[12 8 7] 

W [12] =612* t U 

G [12W] =G [12B]* i-T^o 

w[2] e= W[12] 

[0 7 5 0] 

(O a^*w[2l a I] fcftU W[12]±05fD i:««53^0fn fc«£J: »> 5e« L, G[12W]± 

o^p t * * 9 -ft *mfr&<7>m 1 7s a 9 -f&K «t •? 3©Hi- * 0 

[0 7 5 1 ] 
[12 8 8] 



• B[12]=F p [ 7 ] /( 7 2 -1), 

• 56[24](1)=1, 95 [24] (0)=?7, 

• G[12B]=G[1]2 S 

• aP[2]=(a[|0|]P[|0|]+a[|1|]P[m3,aa[|0|]Pa[ni]+a[|1|]Pa[|0|]) 

• W[12]=B[12] 

• e[iii]=(o,-,o,i,o,-,o) (\mm<7>&m) 

• *[2] :F p -W[12]£x *[2](x[|*|])e[|ar|] 

• P[2]=(P[|0|],P[|1|]), P[23]=(P[3|0|],P[3|1|]) e G[12B], 

a=a[|0|]+a[|1|] 7 e= B[12], P[2]= 
(P[|0|],P[11|]) e G[12B], 

• k : p(Dbf >v hWi, 

• x=x[|k-1|] II - II x[|0|], 

• G[12W]=G[12B] 



[0 7 5 2 ] 

Bf-f-^E[27] HG[12W] tt S , WRElGamalBf-^6DlH«T-* 2 0 
[0 7 5 3 ] 

«afte£IW*Fps 2H&«t£iig&G[12W] 2 , sp^WSrGClZW], §L»^£W[12] 
[0 7 5 4] 

«4lStt4i:tt, P=P[l0|]+7P[lll]t?P[|0|],P[lll]^O fc** io*ftti:l*o 
[0 7 5 5] 
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[*2 8 9 ] 

a e F p 

[ 0 7 5 6 ] 

[ 0 7 5 7] 
[12 9 0 1 

r ge B[12] 

[ 0 7 5 8] 

m^JC (P [3] , Q [3] ) = (rP, M+rQ) * Ht^l" £ » 
(P [3] , Q [3] ) i W* Z> K f±Q [3] -aP [3] =Sr ft *Uf A ^ o 
[Bff^^E[2],E[25]] 
4: : 
[0 7 5 9 ] 

cat 2 9 1 ] 

• K[1]=i |x[|wWh|]}(weC[1],WeiL,R},he{0,l} | x[|wWh|]eF F 

• A[12]={ i a[2|wWijk|]} ({wec[1],W€={L,R},i,j,ke{0,1}}£j£5)|a[ 

• A[125] = { I A[25|WWijk|i[6]j[6]k[6]]{{weC[l],We|L,R}, i, i[6],j, j[ 

- |A[25|wWi jk| i [6] j [6]k[6]] ew[12]} 

• G[1|K|]=i !P[|wWh|]} ({weC[1],W€=[L,R},h€=|0,1}} £i£3)|P[|wWh 

• G[12|A|]={| P[2|wWijk|]} (weC[1],We{L,R},i,j,ke{0,1}})|P[2|wWi. 

• G[124|A|]={ I P[24|wWijk| i [6] j [6] k [6] ] } 

( |wec[1 ] , We {L, R} , i , j , k, i [6] , j [6] , k[6] e {0, 1 } } £ ) 
|P[24|wWijk| i[6]j[6]k[6]]eG[12W], 

• aA=(aA[|1|],aA[|2|]) 

• a[5]A[5]=(a[5]A[5|1|],a[5]A[5|2|]) 

• a eA[12] 

• A=(a[|1|],A[|2|]) e G[12|A|]2 

• a [5] e A[125] 

• A[5]=(A[5!1l],A[5|2|]) e G[124|A|] 2 



[0 7 6 0] 

K c07CxWwWhfiS;^^x[|wWhl] £:#< fC L, 
A[12]OTGx[2]OwWijk*^*x[lwffijk|] i:»<*i~ U 
A[125](^7nA[25]OwWijk, i[6], j [6] ILk[6]j£5fr£x[|wWijkl i[6] j [6]k[6]] 

[0 7 6 1 ] 

2004-3077570 
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[0 7 6 2 ] 
[t2 9 2] 

• a[25]*b[25] = Z j[7]ij[7]ik[7] 

a[25|WWijkli[7]j[7]k[7]] 

b[25|wWi [7] j [7]k[7] I i [6] j [6]k[6]], 

• a [25] *P [24]= I a[25|wWijk|i[7]j[7]k[7]] 

P[24lwWi[7] j[7] k[7]|i[7]j[7]k[7]] 
(i[7],j[7],k[7]lC|lT|-**n) 



[0 7 6 3 ] 
[0 7 6 4 ] 

[0 7 6 5 ] 

[85:2 9 3 ] 



• E [25] [(Z [2] Is [25]) ](M [25]) 

(E[27] [(Z[2] |s[25|wWi jk| i [6] j [6]k[6]])] (M[25|wWi jk| i [6] j [6]k[6]])| 

• E[25][(Y[2]|s[25])](M[25]) 

E[25][(s[25]|Z[25])](M[25]) 

• E[2][(x[2]|r[2])](M[23) 

|E[27][(x[2|v»Wijk|]|r[2|wWijk|3)](M[2|wWijk|]) 

• E[2][(Y[2]|r[2])](M[2]) 

E[2][(x[2]|r[2])](M[2]) 

• tz tzLZZ. V 

m M [25]= {M [25 1 wW i j k | i [6] j [6] k [6] ] } , 

M[25|wWijk| i[6]j[6]k[6]] e G[12W] 

• Z [2] = {Z [25 1 wW i j k | i [6] j [6] k [6] ] } , 

(Z[25|wWijk|i[6]j[6]k[6]] e G[12W]2) 

• s[25]={s[25|wWijk|i[6]j[6]k[6]]) eA[125] 

• Y[2] = (P[2],r[2])e=G[12W], 

• Z[25]=|Y[2]}[|wWijk| i[6]j[6]k[6]] 

• H[2]={M[2|WWi jk|]} [|WWijk|] (M[2|wWijk|] e G[12W]) 

• x[2]=(P[2],G[2])=({P[2|wWijk|]}, { Q[2] 

[IwWijkl]}) 

(P[2|wWi jk|], Q[2|wWijk|]€EG[12W]), 

• r[2]=|r[2|vi/Wijk|]}, r[2|wWi jk|] e J} W[12] 



[0 7 6 6] 

Bt-t^E[2], E[25]^^tL-r^, mmmmM±v#mmz-^jf-?^m^-, mmmwm 
[^^oie-t] 

[0 7 6 7] 
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[t2 9 4 ] 



• h[:l|w|](ijk))=(i[~J[|w|]j)Ok 

• F[25:l| A CM 13, A[|2|3, A[|2|]|](x[2]) = 

Ix[2:l|wh[|w|](ijk)|] 
S(i,i[6]OA[|1w|]), 
S (j, j[6]OA [|2w|]), 
S (k,k[630A[|3w|3)l 
(wWi i[6]jj[6]kk[6] ^mt%m)o 

• J[2](x[2]) e A[12]=J[2](x[23)=lx[2|W(w)i[W3l3. 

• n [2] (a [25] ) = i Z a [25 1 wW i j k 1 i [63 j [6] k [6] ] } [|ijk|]} 

(*ntei[63. i [6]. k[6]tcHT5^n) 



[0 7 6 8 ] 

fztz Liit 
[0 7 6 9] 
[15:2 9 5 ] 

• a[|1|]={a[|1w|3K A[|2l3=U[|2w|3K 

A [|3|]={ A [|3w|]} : fcf-y N^JSo (w^C [l]lZHf3g) 0 

• x[23=lx[2!wWh|]} x[2|wWh|3e W[12], 

• roj :t*-y hm<D%mm%mu 0 

• rn[iwi]j -.m^mmr z "mm? <> 

Ui.^l^-ftl^^oTl^)^ O[|wl3j=0 (othewise)o ) 

• S (i, i[63) : ?n%vl) — <D9 ! )\'$o 
m i[W3 = i (if w=L), i[W3=i (if w=R), 

• a[253=la[25|wWijk|i[6]j[6]k[633} e A[1253 

[0 7 7 0] 
[0 7 7 1 ] 



tf}fiE# 2004-3077570 



mm 2004-016881 



76/ 



[t2 9 6] 

• (a [25] *b [25] ) c [25] =a [25] * (b [25] *c [25] ) , 

• (a[25]*b[25])P[2]=a[25]*(b[25] {}P[2]), 

• F [25 : i | A [311 1], A[3|2|], A [3|3|]|](D 

*F[25:I| A[|1|], A[|2|], A[|3|]|](x[2]) 

F[25:l| A [3|1|]OA [|1|], A [3|2|]OA [|2|], A [3|3|]0 A [|3|] |] (x[2]> 

• F[25:l| A[|1|], A[|2|], A[|3|]|](x[2]) 

*F[25:l|0,0,0|](x[23])=F[25| A[|1|], A[|2|], A [ 1 3 1 ] | ] (x [2] Ox [23] ) 
tztcLZZX* 

• a[25],b[25],c[25]eA[125], 

• a[2],b[2]eA[12], 

• x[2],x[23] e jc, 

• A[|1|]=U[|1w|]}, A [|2|]={ A [!2w|]{ 

A[|3|]={A[|3w|]}, 

A [3|1|]=U [|1w|]K 

A [3|2|] = j A [|2w|]) , 

A [3|3|]=j A [|3w|]} : KCOie^lJ 

• I e |1,-,N} 

[0 7 7 2 ] 

mom a m\n^WM * ^ & 0 

[0 7 7 3 ] 

ui ^bodyi 0 zftM-t %> ^m^mmin> 0 

[0 7 7 4 ] 

Ui ttJeHTSrth^i-^o 
[0 7 7 5 ] 
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[t2 9 7] 



• x[:0|wWh|]=0, 

• x[2:0|wWh|] 

4> [2] (x[:0|wWh|]), 

• x[:0] 

|x[:0|wWh|]}, 

• x[2:o] 

ix[2:0|wWh|]} , 

• A[:o]=U [:0lw|]={o}, 

A [l:o]=}a [:0|L(w)|]=|0}, 
a [r:o]={a [:oir(w)|]=|o}, 

• r[2:0]={r[2:0|wWijk|]) = |0} (wWi jktcWf §1) 

• y[:o]=o, 

r[2:0]=y[:0]P[2] (=0), Y[2:0]=(P[2], r[2:0]) 

• s[2:0|S|]=Ks[2:0|S|])[|v»Wijk|i[6]j[6]k[6]]) 

= 10} [IwWijkl i[6]j[6]k[6]], 

• s[2:0|T|]=j(s[2:0|T|])[|wWijk| i [6] j [6]k[6]]} 

= 10} [|wWiik|i[6]j[6]k[6]], 

• s[25U:0]=|(s[25U:0|wWi jk| i [6] j [6]k[6]]} 

= {0} [|wWijk|i[6]j[6]k[6]], 

• (S[2:0],T[2:0],U[25:0l) = (E[2] [(Y[2:0] |s[2:0|S|])] (r[2:0]P[2]) 

• E[2][(Y[2:0]|s[2:0|T|])](r[2:0]Q[2:0]), 

• E[25][(Y[2:03ls[25R:0])](F[25:l| a [l:o], a [r:o], A [:0]|](x[2:0])P[2]) 

• BODY^ = 

(Q[2:o],r[2:0]) II (s[2:0],T[2:o],U[25:o]). 
• w€= |}C[1],We lL,R},he jo,1}, i, j,ke{o,1} 



[0 7 7 6 ] 

[^lJia^ft*^>M] 

— mu<d~?)vt^-t 4nn*nm-r&o mi 5 ^mL-xum-r^o 

[T- 9 cOJM#150lcO#fffl] 

4HJi \m -ifrbT-* DATAi 1 " 1 £ £ ifJDL %> 0 (Ui CO & > fflfl-lft K g frX T~? DATAi 1 " 
1 =DATAi 0 

£ttiti-&)o 

^TUi-i^^DATAi 1 - 1 II BODYi 1 " 1 II PROOFi 1 " 1 II SIGi 1 " 1 II 
^mbfrX^tzh, UiJ±PROOFi\ -^ROOFi'-^IE^tt^lSMI-^o £ ^ZE^ttO^IS 

it- ? tip<Dm%x<vm>Ei503<Dmmi 

Ui5±SIGi\ SIGi 1 " 1 co iE^tt^l4fSi-^o $ bKMNdco^y v^tP^ftlt U P[ 
2] = (e[IOI]+-+e[| k-1\]) (l+ v )?*mmir2>o 
[UiOO^^ft}$:i504co?Nffi] 

Uiti£1\ SL$CRAND*ffiftK®0\ RANDOM y v iflt 
[0 7 7 7] 
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[»2 9 8] 



[ 0 7 7 8 ] 

fcU P[2]-(e[|0|]+-+e[l*-l|])P[ZB]fcU B0DYi -1 = RAND II P[2]tU LTBODY 
i° ift-eKit &3MEfcfl£o-C gfl-effofcU $ <b OTOOFi 0 =SIGi 0 = e fcU DATAi 0 =RAN 
D| IBODYi 0 I IPROOFi 0 I 1 SIGi 0 tt&o 
[ 0 7 7 9 ] 

[&8c&j£l505©#»I] 
Uitt?>^AfcJBJlT*S.£(fc;E L**oirtO|Bi£«r#tfe-f i -9 fc) : 

[ 0 7 8 0] 
[12 9 9 ] 

• {x[#l|wh|]} (x[#.I|w[t]0|]}=0, 

x[0#l|w[t]0|3=1, 

x[#l |wh|]eK[l],^-x[#l |wh|]tf)«_H&t£>y M±1)„ 

• |x[|wWhi]},x[|wWh|] e{0,1} (x[#l|wLh|]Ox[#l|wRh|]==x[#l|wh!]) 
iwec[1],We lL,R},he {0,1}} 

• r[2]=|r[2|wWijk|]}eA[12], 

• r[2IWWijk|]eF p *CB[12] *=*[12], 

• s[2|S|] = {(s[2|S|])[|v»Wijk|]}eA[12], 

• s[2|T|] = |(s[2|T|])[|wWijk|]JeA[12], 

• s[25U]=ls[25U|wWi jk| i[6]j [6]k[6]]} e=A[125]. 

• A[#l] = U[#l|w|]} (If v hC7)M, A[|w[t]|]=0) 

• y[#l]e F p c K 

[0 7 8 1 ] 

•w t : tB^UlT- 

A^StW^tU f^^t'x[#HL(w)0|]=x[#l|R(w)l|]=Ofc^«i-^o 
[0 7 8 2 ] 

[0 7 8 3 ] 
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H&3 0 0] 



x [ : 1 1 WWh I ]=Ox [# y I wWhl ] , ( y ^ I 0) gtftfeftifeS* 0 

x[:i]={x[:i|wWh|]}, 
x[2#i|wWh|]=^[2] (x[#l|v»Wh|]), 
x[2#l]=(x[2#l|wWh|]}, 
x[2:l|wWh|]= 9 s[2:l](x[|wWh|]), 
x[2:l]={x[2:l|WWh|]}, 

A[#l] = iA[#l|w|]}, 

A[L#l]=U[#l|L(w)|]}, 

A[R#l]={A[#l|R(w)|]}, 

A [:l|w|]=2 A [#y |w|], (y^l^iSHWfP^aX'S) 
A [:i]=U [:l|w|]}, 
A[L:l]={ A[:l|L(w)|]}, 
A [r:i]={a [:i|R(w)|]}, 
• Y[2:l]=(P[2],y[:l]P[2]), 

y[:l]=Zy[#l], (y ^ltf>i&ffl<Dftl£ms) 

[0 7 8 4 ] 

«^5^HU ^©Wfi^o o---if3i^7 0 n h 3^i:U^TV»S^ # 
Ui (^^^x-^BODYi 1 tt^T^if 7ti- 0 

• BODYi 1 = (Q[2:l],r[2:l]) II (s[2: 1],T[2: 1],U[25: 1]), 

• (Q[2:l],r[2:l])=J[2](x[2:l])P[2Ly[:l]P[2]K 

• (s[2:l],T[2:l],U[25:l]) = (E[2][(Y[2:l]ls[2][S:l])](r[2:l]P[2]) ) 
E[2][(Y[2:l]|s[2:l|T|])](r[2:l]Q[2:l]), 

E[25][(Y[2:l]|s[25U:l])](F[25:l| A [L:l], A [R:l], A [: 1] I] (x[2: 1])P[2]) 
fzfz LZ. it? 
[0 7 8 5] 
[Sfc3 0 1 ] 

• s[2:i|S|] 

Zs[2#y|Sl] (y^lCDlEfflM^lXS), 

• s[2:l|T|] 

Is[2#y |T|], 

s[25U:i]= [235U: l]+s[25U#l], 
s[235U: I] 

F[25:l| A[L#I], A[R#I], A[#l]|](1) 

* s[25U:i-1] 

* F[25:l|0,0,0|](x[2#l]), 

[0 7 8 6 ] 

[*ff#1506O#|ffl] 
— Miao-7;V^/^-7-^ft#<75^:ft#1506^ilI 1 7 KmLxm®MirZ>o 
[0 7 8 7] 

ui ^bodyi 1 ^ttjf-r & ^fe ^mBj-r & o 
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[ 0 7 8 8 ] 

Ui t -r, 

• Q[2:l]=J[2]x[2#l])Q[2:l-l] 

• r[2:l]=y[#l]P[2]+r[2:l-l] 

[0 7 8 9] 

[■^-^^^1702] 

• S[23:l]=r[2#l]s[2:l-1] 

• T[23: l]=r[2#l]J[2] (x[2#l])T[2: 1-1], 

• U[235:l]=F[25:lU [L#l], A [R#l], A [#1] I] (1) *U[25 : 1-1] *F[25: 1 1 0, 0, 0 1 ] (x[2#l]) 
[ 0 7 9 0 ] 

&jo, ioH^fis : 

• Q[2:l]=J[2](x[2:l])P[2L 

• r[2:l]=y[:l]P[2], 

• S[23:l]=E[2] [(Y[2: 1-1] I s [2 : 1-1 1 S I ] ) ] (r [2 : 1]P [2] ) , 

• T[23:l]= E[2][(Y[2:l-l]|s[2:l-l|T|])](r[2:l]Q[2:l]), 

• U[235:l]=E[25][(Y[2:l-l] I s[235U: 1])] (F[25: 1 1 A [L:l], A [R:l], A [: 1] I] (x[2: 1])P 

[2])o 

[0 7 9 1 ] 
fz Tz. L CI d "C 
•s[235U: 1]=F[25: 1 1 A [L#l], A [R#l], A [#1]|](D 
*s[25U:l-l] 

*F[25: 110,0, 01] (x[2#l]) 

[#Hf-5Hfc-Mft<9«1703, SBS^b-SLafcO3£5fel704, JE^teSEW *Oft^l507, 
*£:fc<0ffoftl5O8, 7*- *£>2Hgl509] 
*SfeKUi {±mT^ft#i-^.o (^o i|*I{±|H4 , C0#-f-)o 

• (1703) 

s [233 : 1 ] =S [23 : 1 1 1 1 ] , S [23 : 1 1 2 1 ] +y [# 1 ] s [2 : 1 1 1 1 ] ) , 
T [233 : 1 ] =T [23 : 1 1 1 1] , T [23 : 1 1 2 1 ] +y [# 1 ] T [2 : 1 1 1 1 ] ) , 

T[2335:l]=(U[235:l|l|],U[235:l|2|]+y[#l]U[25:llll]), 

• (1704) 

s[2:l]=s[233:l]+E[2][(Y[2:l] ls[2#l|S|])](0). 

T[2:l]=T[233:l]+E[2][(Y[2:l]|s[2#l|T|])](0) 

U[235:1]=(U[235:1I1|],U[235:1|2I]), 

U [25 : 1 ] =T [2335 : 1 ] +E [25] [ (Y [2 : 1 ] I s [25U#1] ) ] ( 0 ) , 

(s[2:l].T[2:l],U[25:l]) 

(E[2][(Y[2:l]|s[2:l|S|])](r[2:l]P[2]), 

E[2][(Y[2:l]|s[2:llT|])](r[2:l]Q[2:l]), 

E[25][(Y[2:l]|s[25U:l])] 

(F[25:1][(A [L:l], A [R:l], A [: 1] I )] (x[2: 1]P[2]) , 

• (1507) 

• (1508) 

• B0DYi'=s[2:l] 

• DATAi 1 ~ 1 II BODYi 1 " 1 II PROOFi 1 " 1 <?:f-£ 
SIGi 1 fctfsjSo 
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• (1509) 
DATAi 1 

=DATAi 1 " 1 II BODYi 1 II PROOFi 1 I I SIGi 1 
DATAi 1 3rUi + i 
tzfz L^^f 

• S[23: 1]=E[2] [(Y[2: 1-1] I s [2 : 1-1 1 S I ] ) ] (r [2 : 1 ]P [2] ) , 

• T[23:l]=E[2][(Y[2:l-l]|s[2:l-l|T|])](r[2:l]P[2]), 

• U[235:l]=E[25][(Y[2:l-l]|s[25U:l-l])](r[25:l]P[2]), 

• S[23:1]=(S[23:1|1I],S[23:1|2|]), 

• T[23:1]=(T[23:1|1|],T[23:1|2|]), 

• T[23:l]=(T[23:llll],T[23:l|2|]), 

iE m it ie m x co $l 1 5 o 7 <d w *m t ± * vr ><d -e m so % k t *> 1~ o 

[0 7 9 2 ] 

DATAi l -(Q[2:l],r[2:l]) II (s[2:l],T[2:l].U[25:l])«rUui^& 0 
[0 7 9 3 ] 

4 is, £ <D^<fcffnk%> : 
•S [233:1] =E[2][(Y[2:l]|s[2:l-l|S|])](r[2:l]P[2]), 

• s[2:l] = E[2][(Y[2:l]|s[2:l|S|])](r[2:l]P[2]) 0 

m~mBmm<Dwm*mi 5 izmLxwLW-t&o 

[0 7 9 4 ] 

#Ul ttUl-l*»?>7*-^ 

DATA2 1 _ 1 

DATA2 1 ■ 2 11 B0DY2 1 _ 1 11 PR00F2 1 - 1 11 SIG2 1 - 1 

[0 7 9 5] 

[T- ^ ^comm^CCO^Ul502, T- ? ^<Dm%JC<vmiEl503, Ui<7)^Tdlt#1504. 
&$c£.j£l505Oi$8B. Fp_hOBf^-O#mi801] 

• (1502)PR00F 2 1 II - II PR00F 2 1 - 1 <75lE^'l«fiE(l^ffli±^)o 

• (1503)SIG 2 1 II - II SIG 2 1 - 1 OiE^ttMiE 

• (1504MrT& L&v> 

• (1505MpJ£ L&v^ 

B~fflB<DtfM.<D^tiM-15Q6<DWm%m l 8 £IU LTI&HJ-f& 0 
[0 7 9 6 ] 

[F P ±O0f^-O#mi8Ol] 
[0 7 9 7] 

Ui i±mT^ft»*i-^> : 

•s[2U] = «- [2](s[25U]), 

•m[2S]= r[2], 

•m[2T]= r[2]J[2](x[2]), 

•m[2U]= F[25l A [L] , A [R], A l](x[2]), 

•U[2] = tt [2] (U[25]) 

• (s[2],T[2],U[2]) 

E[2][(Y[2]|s[2|SI])](m[2S]P[2j), 

fflfE# 2004-3077570 
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E[2][(Y[2]|s[2|T|])](m[2T]P[2]), 
E[2][(Y[2]|s[2U])](m[2U]P[2]) 

•X=|(P,x[|wh|]P)K Y=|(P,yP)|, 

•E[l] [(r|X)] (A)= |E [7] L(r[|wWijk|] IX)] (A[|wWi jk|]P)| 
•E[7] : WnElGamalW^jSOW^bWSCo 
[ 0 7 9 8 ] 

[ 0 7 9 9] 

[tfc3 0 2 ] 

• (s[24VlwWi jk|]=Is[2V| o-wWijkl], (a izm-? ZZUZMZ) 

m (m[24V|wWi jk|]=Z2*m[2V])[| eewWi jk|], (a CWT-S^P £B3 ) 

• (s[24V|wWijk|]P[2B| |]=Z2^s[2V| awWi jk|]P[2]) , (a l^Mf ZmZMZ) 

• s[24V]P[2B]=(s[4V|0,wWi jk|]P, s[4V| 1 , wWi jk|]P) , 

• (m[24V|wWijk|]+(s[24V|wWijk|]y)P[2B] 

Z2<*m[2V| awINi jk|]+s[2V| awWi jk|])yP[2B] (a t3HT-3fn£I23) 



• <s[2V|wWijk|] 

Zs[2V| arwWijklleLa'] ( a? [ZMt £H<3) 

• (s[24V|wWijk|]=((s[V|0,wWijk|], (s [V] ) [ 1 1 , wWi j k | ] ) 

• (m[2ViwWi jk|]=m[2V|wWi jk|] 

2m[2Var |wWtjk|]e[| a |], ( a CUf 3fQ£IR 5) 

• m[24V|wWi jk|]=(m[4V|0,wWijk|],m[4V|1,wWi jk|]), 

• P[2] 

Ie[| a |]P[2B] UtcHf £fR£3X-5) 

• P[2B]=(P,P), PG |}G[1], 

• V[2] 

i[2][(Y[2]|s[2V])](r[2]P[2]) 

"(s [2V] P [2] , m [2V] P [2] +s [2V] r [2] ) , 

• s[2V|wWijk|]P[2] 

I (s[2Va- IwWi jk|]e[U |]P[2B], ( a IZMt £123) 
m (ni[2V|wWijk|]+s[2V|wWijk|] • y)P[2B] e W[12] 

I (((m[2V]) [| oc |]) [IwWi jkl]+s[2V| a I IwWi jk|]yP[2B]e[| a |]„ 

(aizm-fzmzmz) 

• (m [24V IwWi jk|]+s [24V I WW i j k I ] y) P [2B] 

(m[4V|0,wWijk|]+s[V|0,wWi jk|]y)P, 
(m[4V|1,wWijk|]+s[V|0,wWi jk|]y)P 



[0 8 0 0] 
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• s[V|0,wWijk|]P, s[V|l,wWijk|]P, 
•m[4VlO,wWijk|]+s[V|0,wWijk|]y)P ( 
m[4V|l,wWijk|]+s[V|0,wWijk|]y)P, 

•R=yP, Y=(P,R) 

• (s[V|0,wWijk|]P, 
(m[4V|0,wWijk|]+s[V|0,wWijk|]y)P 

E[(s[VI0,wWijkl]|Y)](m[4V|0,wWijk|]P), 

• (S.T+U) 

(E[3][(s[4S0],s[4T0]+s[4U0]lY)],E[l][(r[40]|J(X))](F[| A [L], A [R], A |](x)) 

• |(©[lwWijk|], ©' [IwWijkl])! 

E[3][(s[4S0],s[4T0]+s[4U0]|Y)],E[l][(r[40]IJ(X))](F[| A [L], A [R], A |](x)) 

e [ftoj 

1(0 [IwWijOl], 0' [IwWijOlDI 
•R[&0]=Ro 
tztz Liit 

• r[2]=R[|0|]+R[|ll] 7 

[ © [&i] ^tt#i802, iEmmmi-x<Di^ibQimrm, m^-x^mwrnwrn, r- * <d 

• (1802) 

• © [&1] = © [&l-l]-(e [101] [&1-1], 0[lll][&l-l]-y[&l]@[|O|][M-l]), 
•B0DY 2 '=© [&1] 0 

[0 8 0 1 ] 

•B0DY 2 '- 1 = ® [&1-1], 

• © [&1-1] =( © [ftl-1] [0] , © [&1-1 111]) 

• (1508) 

• (1803) 

•BODY2 1 = s[2:l] 
•SIG2 1 : 

DATA2 1 " 1 II BODY2 1 II PR00F 2 1 ^-^^^ 

* L TDATA2 1 =DATA 2 1-1 II BODY2 1 I I PROOF2 1 I I SIG2 1 £Ui + 1 KM^ir Z> (1509) o 
[0 8 0 2 1 

3 m^mfMm^m^m 1 5 ^mLxmm-t&o 

[0 8 0 3] 

DATA3 1 ~ 1 

=DATA3 1 " 2 II BODY3 1 II PROOF3 1 II SIG3 1 

WmhtLX%fch (1501) . tTPROOFs 1 , PROOFs 1 " 1 , SIGs\ SIGs 1 " 1 OiE^tt 
*fltB*tS (1502,1503) o (1504). (1505) li»=Hi OW-#t?li&V^ 0 BODYs^e L(15 

06) , PROOFs 1 = £ L (1507) . * L "CDATA3 1-1 II BODY3 1 I I PROOFs 1 & M^tSIGs 1 

fcflyft L (1508) , DATAs 1 =DATA 3 1-1 II BODY3 1 I I PROOFs 1 1 1 SIG3 1 t L, DATAs 1 *Ui £ 
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m& (1509) o 
[0 8 0 4 ] 

[C[l] ( |b[|w| ] I ) %i£tb &*&1405] 

c[i](Ib[iw|]|)^**s^fi*mBJ-r^o 

[0 8 0 5] 

£~f A*«^w^^L-Cx[ttllL(w)01]=x[#l|R(w)l|]=0-C'^^<7)-C\ {E[l][(| |X[|W(w)i[ 
IWI]|]})]x[|wWh[3](ijO) |])| Xx[|wWh[3](ij0)l]=x[|wW^ [w] |]Sr**, x[3 

|w|]=x[|w^ [w]|]=x[|wL^ [w] |]Olfx[|wRyu [wjimtJfU fx Ew]=h[3](ij0) t1r2> 0 
[0 8 0 5 ] 

[0 8 0 7 ] 

J^TC0ft#^LTullgOx[| [|wl]|]*^«i>So 
#E[l][(|X[|L(w)^ [|L(w)|]|])] 
(x[| |wWh[3](^ [|L(w)|]jO)( I]), 
E[1][(|X[|R(w)a* CIR(w)I]|])] 
(x[|wWh[3](i^ [|R(w)0)|]|]) (i,j=0,l) 
*x[IW(w)^ [IW(w) OO^ftoTKo 
#x[|wh[3]^ [|L(w)l]/z [|R(w)0|]|] 
=Ox[|wWh[3]^L(w)^ [ I R(w) 0 1 ] I] 

•h[3](ijk)=h[lw|]((iOA ElL(w)|])(jOA [|R(w)|])(kCU [|w|])) 
m M [w]=b[|w|]OA [|w|] h L, 
•b[|w|] : m^vKD&IJ 
•x[3|w|]=x[|w^ [w]|] 

m%irMKxi\ M i\wi\ttt\m= M [i[iw[iti]i]i]=b[i[iw[iti]i]i]=c[i]({b[iwi]})*m* 

o 

[0 8 0 8 ] 

[0 8 0 9] 

[ft 3 0 3] 

• ACl2|F p |]=Ua[2|wWijk|]} |a[2|wWi jk|]eF p } s 

• F[25:i|a[|0|]b[|0|]c[|0|]|a[|1|]b[|1|]c[|1|]](u[2])eA[12]* 

F[25:l|abc|a[|6|]b[|6|]c[|6|]](u[2]) 

lx[2|h[:l|wa[iiOi[6]|]b[|jOj[6]|]c[|kOk[6]|]|]|](ijk)} 

Q w ; 

• z[2]eK[12], 

• a[2]^A[l2], 

• a [25] e= A [125], 

• a[|0|],a[t1|],b[|0|],b[l1|],c[|0l],c[|1|],e F p , 

• u[2]«EK[12], 

[0 8 10] 

ffi|E# 2004-3077570 
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zmn-c-n, r:i-u **w&i-*o 

[0 8 1 1 ] 

[0 8 12] 

[0813] 
[S3 0 4] 

P[6]€=G[1] 

[0 8 14] 
•P[26B]=(1+ 7 )P, 

•P[26] = 2P[26B]e[| « I], ( « KM-f £fn«&) 
•N0T(A)={N0T(A [lw|])| 
Ui ^mT^^JIR-ePROOFi 1 Zftm-t&o 

[0 8 15] 
[&3 0 5] 

x[26#l]e« , 

P [26#l|S[23]|]eA[12]2, 

P [26#l|S[233]||2|]eA[12], 

p [26T[2&1]#I]€=A[12]2, 

p[26T[233]#l]eA[l2]2, 

p[26T[233]#J|2|]eA[l2], 

P [246#l |T[233]||2|]eA[12] 2 , 

p[256#l|U[25&1]|]eA[l25]2, 

P [256#l I A |]e=A[125], 

p [256# 1 1 U [25&2] I ] e A [1 25] , 

p[256#l|U[25&3]|]eA[125], 

p [256# I ]U[235: l]|]eA[125] 

p[256#l |T[2335:l]||2|]eA[l2]. 

[0816] 

•C[2x[2]#l I [I «wWh|]|]=x[2#l| «wWhl]P[2B] + (x[26#l| «wWh|]P[26B], 
C[2x[2]#l]=|2e[l a l]C[2x[2]#l|[| «wWhl]|]t [IwWhlK («Cit^«W) 

miE# 2004-3077570 
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•C[2#1|S[23]|] = SC23: 1] + (0 [26S[23]#1]P[26], 
r [S[23]#l]=^ [26S[23]#1], 

•C [2S [23] # 1 ] = (C [2S [23] #111 1], (C[2S [23] #1] ) [ 1 2 1 ] ) * (C [2S [23] # 1 1 1 1 ] , C [2S [23] #1121 

])£#<o 

C[y,C[2S[23]]#l|l|] 

yC [2S [23] #1 111] + p [26S [233] #1 1 2 1 ] P [26 1 I ] |A[12] I , 
C [2S [233] #1 ] = (C [2S [23] # 1 1 1 1 ] , C [2S [233] #1 1 2 1 ] ) , 
C [2S [233] #1 1 2 1 ] =C [2S [23] #1 1 2 1 ] +C [2y , C [2S [23] ]#1 111], 
r [S[233]#l] = (r [S[23]#l|l|], 
t [S[23]#l|2|]+yr [S[23]#lll|] + /0 [26S[233]#l])o 
[0 8 17] 
fztz L^l^-C 

(r [S[23]#l|l|]> r [S[23]#l|2|]) =(r [S[23]#l])o 
•C[2T[2&l]#l]=T[2&l:l] + j o [26T[2&1]#1]P[26] *, 

r [T[2&1]#1] = P [26T[2&1]#1], 
•C[2T[233]#l]=T[233:l] \ P [26T[233]#1]P[26] , 

r [T[233]#l]= j o [26T[233]#1], 

•C[2T[23:1]#1] = (C[2T[23:1]#1|1|],C[2T[23:1]#1|2|])£ 
(C[2T[23:l]#llll],C[2T[23:l]#ll2|])fc#< 0 

C [y , C [2T [23 : 1 ] ] # 1 1 1 1 ] =yC [2T [23 : 1 ] # 1 1 1 1 ] + p [26T [233] # 1 1 2 1 ] P [26A [12] ] , 
C[2T[233]#1] = (C[2T[23 : 1]#1 1 1 1 ] , C[2T[233] #1 121]), 
C[2T[233]#l|2|]=C[2T[23:l]#l|2|]+C[2y,C[2T[23:l]]#l|ll], 
r [T[233]#l] = (r [T[23:l]#l|l|], 

r [T[23:l]#l|2|]+yr [T[23: 1]#1 1 1 1 ]+ P [26T[233]#1]) 0 
[0 8 18] 

L- ^ 

(r [T[23:l]#lll|J, r [T[23:1]#1I2|]) = r [T[23: l]#l] c 
•K [2y, C [2T [233] ] # 1 1 1 1 ] =y [4# 1 ] C [2T [23 : 1 ] ] + P [246T [233] # 1 1 1 1 ] P [26] , 
•c [25U [25&1] #1 ] =U [25&1 : 1] + ^ [256#1 1 U [25&1] I ]P [26] , 
r [U[25&l]#l]= / o [256#1IU[25&1]|] 0 
•C[2A#1]=A [#l]P[2] +<0 [256#1U l]P, 
# p [256N0T( A )#1]=- p [256 A #1] , 
C[2N0T(A)#1]=P[2]-C[2A#1], 

•C[2U[25&2]#l]=F[25:l| A [L] || 00 1 NOT ( A ) [L]00] (u[2]) 
C[2U[25&1]#1]+^ [256#1|U[2542]I]P[26], 

NOT(A)[L]=|NOT(A)[|L(w)|](o 

r [U[25&2]#l]=F[25:l| A [L] il 00|NOT( A ) [L]00] (u[2]) 

r [U[25&l]#l] +(0 [256#1|U[25&2] I], 

•C [2U [2543] #1] =F [25 : 1 1 0 A [R] 0 1 ONOT ( A ) [R] 0] (u [2] ) 

C [2U [25&2] # 1 ] + P [256U [25&3] # 1 ] P [26] , 

N0T(A)[R]={N0T(A)[R|R(w)|](o 

r [U[25&3]#1]=F[25:1I0A [R] 0 1 ONOT ( A ) [R] 0] (u[2]) 

r [U[25&2]#l]+ ( o [256U[25&3]#1] 0 

•C [2U [235 : 1 ] # 1 ] =F [25 : 1 1 00 A 1 00N0T ( A ) ] (u [2] ) 

C[2U[25&3]#1], 

x [U[235:1]#1]=F[25:1I00A |00NOT( A )] (u[2]) 
r [U[25&3]#1], 

mtE# 2004-3077570 
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•C[2U[235: 1]#1] = ((C[2U[235: 1]#1]) [111], (C[2U[235: 1]#1]) [|2|]) Sr (C[2U[235: 1]#1 1 1 
|],C[2U[235:l]#l|2|])h#< o 

C [y , C [2U [235 : 1] ] #1 1 1 1 ] =yC [2U [235 : 1 ] # 1 1 1 1 ] + p [256# 1 1 T [2335 : 1 ] 1 1 2 1 ] P [26A [12] ] , 

C [2T [2335 : 1 ] # 1 ] = (C [2U [235 : 1] # 1 1 1 1 ] , C [2T [2335 : 1 ] # 1 1 2 1 ] ) , 

C [2T [2335 : 1] #1 1 2 1 ] =C [2U [235 : 1] #1 1 2 1 ] +C [2y, C [2U [235 : 1 ] ] #1 1 1 1 ] , 

r [T[2335:l]#l]-(r [U[235: 1]#1 111], 

r [U[235:l]#l|2|]+yr [U[235 : 1]#1 1 1 1 ] + p [256T[2335: 1]#1]) , 

(r [U[235:1]#1|1IL r [U[235:l]#l|2|]) - r [U[235: l]#l]o 
[0819] 

[0 8 2 0] 

[1:3 0 6] 

• x[2| «WWh|]P[2B]=1<DR# 0 



*T 7>^^Cx[246&1 1 «wWh|]e=B[l] §1 
t>\ K[2&1 1 awWh|]= 
x[246&1 1 orwWh|]P[26B] 

x[29&37 I «wWh|], 

c[2&7? | ff*|]eB[1]SSt5, 

K[2&7 I arwWh|] 

x[29&9 | «wWh|]P[26] 

-c[2&7 | awWh|](C[2x[2]| orwWh|]-77P[2B])^ 
It IS "3" -5 o 

[ 0 8 2 1 ] 
•x[2| «wWh|]P[2B]= 7 <Dm o 
[0 8 2 2 ] 
[»3 0 7] 



*-f -7>^ACx[246&7 I «wWh|]eB[l] £M 

T>\ K[2&7 I orwWh|] = 

x[246&7 | «wWh|]P[26B]£ltlf1~3o 

x [29&1 1 orwWhl], c[2&1 I orwWhl] 
e=B[1] £>tt>\ 

K[2&1 1 <*wWh|]=x[29&1 I orwWh|]P[26] 
-c[2&1 1 awWhl] (C[2x[2] l flfwWh|]-P[2B]) £ 

ttmu 

(K[2&1 | orwWh|], 

(K[2&7 UwWh|]£tt1tT3o 
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[0 8 2 3 ] 

[ 0 8 2 4 ] 
[«fc3 0 8] 

x[24#l], x[246#l] e A[12], 
y[4#l]e F p , 

r[24#I]€=A[12F p L 
p[246S[23]#l]eA[12]2, 

/>[246S[233]#l|2|]eA[12]2, 

s[24S#l]eA[l25]s r [4S[233]#I 3 eA[l25]2, 

r[24#l]eA[12F p ] N 
p[246T[2&1]#l]eA[l2]2, 

p [246T[233]#I]€EA[12]2, 

s[24T#l]eA[125], r [4T[233]#I ] SA[125]2, 

p [2456U[25&1]#I] 
e= A[125]2, 

P [2456A#!]eA[125], 
A [4#l]eF p , 

N0T(A)[4#I], 

|N0T( A)[4#l|w|]}, 
N0T( A)[#l |wi] 

p C2456U[25&2]#l]e A [125], 

p[2456T[2335:l]#l |2|]eA[12]2, 

s[245U#!]eA[125h r [4T[2335: €=A[125]2, 

[0 8 2 5] 

•K[2x[2]#l]=x [24# 1 ] P [2] +x [246# 1 ] P [26] , 
•K [2J [2] (x) , Q [2] # 1 ] =J [2] (x [24] ) Q [2] . 
[0 8 2 6 ] 
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[ic3 0 9] 

K[2y#l]a=y[4#l]Pe F p C B[1], 

[0 8 2 7] 

•K[2r[2],s[2]#l]=r[24#l]s[2] + i0 [246S [23] #1]P [26] , 

•K [2y , C [2S [233] ] # 1 1 1 1 ] =y [4# 1 ] C [2S [23] ] + P [246S [233] # 1 1 1 1 ] P [26] , 

•K[2s[24S]#l]=s[24S#l]Y[2]- r [4S[233]#1]P[26] , 

•K[2r[2],T[2]#l]=r[24#l]T[2] +(0 [246T[2&1]#1]P[26], 

•K [2J [2] (x [2] ) , T [2&1] #1 ] =J [2] (x [24# 1 ] ) T [2&1] + p [246T [233] # 1 ] P [26] , 

•K[2s[24T]#l]=s[24T#l]Y[2]- r [4T[233]#1]P[26], 

•K [25U [25&1] #1 ] =U [25 : 1-1] *F [25 : 1 1 0, 0, 0 1 ] (x[24#l] ) + p [2456U [25&1] #1 ] P [26] , 
•K[2A,P[2]#1]=A [4#l]P[2] + (0 [2456 A #1]P[26] , 
K[2A ,C[2A]#1]=A [4#l]C[2A#l] + /0 [2456 A #1]P[26] , 

• A [4U1]=U [4#l|L(w)|]}, 

N0T( A ) [4L#1]= |N0T( A ) [4#1 IL(w) I ] t , 

K[2U[25&2]#l]=F[25:l| A [4L]00|N0T( A ) [4L]00] (1)*U[25&1]+ p [2456U[25&2]#1]P[26] , 

• A [4R#1]=U [4#l|R(w)|]}, 

N0T( A ) [4R#1]= |N0T( A ) [4R(w)#l]| , 

K [2U [25&3] #1 ] =F [25 : 1 1 0 A [4R]0|0NOT( A ) [4R]0] (1)*U[25&2]+ P [2456U[25&3]#1]P[26] , 

• A [4R#1]= | A [4R(w)#l]}, 

NOT ( A ) [4R#1]= |N0T( A ) [4R(w)#l]} , 

K[2U[235:1]#1]=F[25: 1 100 A [4] |00NOT( A ) [4]] Q)*U[25&3], 
•K[2y,C[2T[2335:l]]#lll|]=y[4#l]C[2U[235:l]] + (0 [2456T [2335 : 1 ] # 1 1 1 1 ] P [26] , 
•K[2s[245U]#l]=s[245U#l]Y[2]-r [4T[2335: 1]#1]P[26] , 

[0 8 2 8] 

c[#l] = 
Hash( 
DATAi 1 " 1 , 
BODYi 1 , 
C[2x[2]#l], 
C[2S[23]#1], 

(C[2S[23]#1I1I],C[2S[23]#1I2|]). 

C[y,C[2S[23]]#lll|], 

C[2T[2&1]#1], 

C[2T[233]#1], 

(C[2T[23: 1]#1 1 1 1 ] , C[2T[23 : 1]#1 1 2 ] ] ) , 

C[2T[233]#1], 

K[2s[24T]#l]=s[24T#l]Y[2] 

c[25U[25&l]#l], 

C[2A#1], 

C[2N0T(A)#1], 

C[2U[25&2]#1], 

C[2U[25&3]#1], 

C[2U[235:1]#1], 

(C[2U[235:1]#1|1ILC[2U[235:1]#1|2|]), 

C[y,C[2U[235:l]]#lll|], 

C[2T[2335:1]#1I2|], 
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K[2&1| awWhl], 
K[2& 7 I awWhl], 
K[2x[2]#l], 
K[2J[2] (x),Q[2]#l], 
K[2y#l], 

K[2r[2],s[2]#l], 

K[2y,C[2S[233]]#llll], 

K[2s[24S]#l], 

K[2r[2].T[2]#l], 

K[2J[2] (x[2]).T[2&l]#l], 

K[25U[25&1]#1], 

K[2A ,P[2]#1], 

K[2A ,C[2A]#1], 

K[2U[25&2]#1], 

K[2U[25&3]#1], 

K[2U[235:l]#l], 

K[2y,C[2T[2335:l]]#l|l|], 

K[2s[245U]#l], 

) 

[ 0 8 2 9] 

tz /i L o o "PHashli > F P ffi/N y *s a. ito 
[ 0 8 3 0] 

•x[2| awWh|]P[2B]=l<7?0# o 

•#a*WhK*frU c [2&1 1 «wWh|]=c[#l]-c[2&^ | « wWhl] t L> 

x[29&l| «wWh|]=c[2&l| «wWh|](x[26| a I]) [ I wWhl ]+x[246&l ] «wWh|]£ft#o 

•x[2l «wWh|]P[2B]= 7 (DWo 

•4r«wWhfc#U c[2& 7 I «wWh|]-c[#l]-c[241l «wWh|] fc U 

x[29& 7 I «wWh|]=c[2& 7 I «wWh|](x[26l a I ] ) [ I wWhl ]+x[246& r, I « wWhl] £ftft (c[#l]c[2 
&1I «wWh|],x[29&ll «wWh|]),c[2& 7 I awWhl] ,x[29& 7 I awWh|]))-f&o 
[ 0 8 3 1 ] 

•x[28#l]=c[#l]x[2#l]+x[24#l] , 

x [268# 1] =c [#1 ] x [26# 1 ] +x [246# 1 ] , 

•y[8#l]-c[#l]y[#l]+y[4#l], 

•r[28#l]=c[#l]r[2#l]+r[24#l], 

P [268S[23]#l]=c[#l] P [26S[23]#l] + /9 [246S[23]#1], 

•r[8#l]=c[#l]r[2#l]+r[24#l], 

P [268S [233] #1 1 2 1 ] =c C#l ] p [26#1 1 S[233] I 1 2 1 ]+ p [246S[233]#1 12 1 ] , 
•s[28S#l3=c[#l]s[24S#l]+s[24S#l]> 
z [8S[233]#l]=c[#l] r [S[233]#l]+r [4S[233]#1], 
•r[28#l]-c[#l]r[2#l]+r[24#l], 

p [268T[2&l]#l]«c[#l] P [26T[2&l]#l]+ i o [246T[2&1]#1], 
%p [268T[233]#l]=c[#l] P [26T[233]#1]+ P [246T[233]#1] , 
•r[8#l]=c[#l]r[2#l]+r[24#l], 

p [268T [233] # 1 1 2 1 ] =c C#l ] p [26T[233]#1 12 1 ]+ p [246#1 |T[233] 1 12|] . 
•s [28T# 1 ] =c [#1 ] s [24T# 1 ] +s [24T# 1 ] , 

r [8T[233]#l]-c[#l] r [T[233]#l]+r [4T[233]#1], 
m P [2568U[25&l]#l]=c[#l] p [256U[25&1]#1]+ p [2456U[25&1]#1] , 

ffi|IE# 2004-3077570 



mm 2004-016881 



91/ 



• A [8#l]=c[#l] A [#1]+A [4#1], 

^ [2568A#l]=c[#l] p [256A#1]+ P [2456 A #1], 

•N0T( A ) [8#l]=c[#l]N0T( A ) [#1]+N0T( A ) [4#1], 

p [2568U[25&2]#l]=c[#l] p [256U[25&2]#1]+ p [2456U[25&2]#1]P[26] , 

• o [2568U[25&3]#l]=c[#l] ^ [256U[25&3]#1]+ ^ [2456U[25&3]#1]P[26] , 
•r[8#l]-c[#l]r[2#l]+r[24#l], 

p [2568T [2335 : 1 ] # 1 1 2 1 ] =c [#1 ] P [256T[2335: 1]#1 121]+ p [2456T[2335: 1]#1 12|] , 

• s [258U# 1 ] =c [# 1 ] s [245U# 1 ] +s [245U# 1 ] , 

r [8T[2335:l]#l]-c[#l] r [T[2335: 1]#1]+ r [4T[2335: 1]#1] 0 
[0 8 3 2 ] 
LT, 
PR00Fi'=( 
C[2x[2]#l], 
C[2S[23]#1], 

(C[2S[23]#1|1|],C[2S[23]#1|2|]), 

C[y.C[2S[23]]#lll|]. 

C[2T[2&1]#1], 

C[2T[233]#1], 

(C[2T[23:1]#1|11].C[2T[23:1]#1I2|]). 

C[2T[233]#1], 

c[25U[25&l]#l], 

C[2A#1], 

C[2N0T(A)#1], 

C[2U[25&2]#1], 

C[2U[2543]#1], 

C[2U[235:l]#l], 

(C[2U[235:l]#lll|],C[2U[235:l]#ll2|]), 

C[y,C[2U[235:l]]#llll], 

C[2T[2335:1]#1I2I], 

K[2&ll awWhl], 

K[2& 7 I awWhl], 

K[2x[2]#l], 

K[2J[2] (x),Q[2]#l], 

K[2y#l], 

K[2r[2],s[2]#l], 

K[2y,C[2S[233]]#l|l|], 

K[2s[24S]#l], 

K[2r[2],T[2]#l], 

K[2J[2] (x[2]),T[2&l]#l], 

K[2s[24T]#l], 

K[25U[25A1]#1], 

K[2A,P[2]#13. 

K[2A ,C[2A]#1], 

K[2U[25&2]#1], 

K[2U[25&3]#1], 

K[2U[235:1]#1], 

K[2y,C[2T[2335:l]]#l|l|], 

K[2s[245U]#l], 

c[#l], 

x[29&l| awWhl]), 
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mm 2004-016881 



^-v: 92/ 



x[29&7 I «wWh|])), 

x[28#l] ,x[268#l], 

y[8#l], 

r[28#l], 

p [268S[23]#1] 

r[8#l] 

P [268S [233] #1121] 

s[28S#l] 

r[28#l] 

p [268T[2&1]#1] 
p [268T[233]#1] 
r[8#l] 

P [268T[233]#1|2|] 
p [2568U[25&1]#1], 
A [8#1] , 
p [2568 A #1] , 
N0T(A)[8#1], 
p [2568U[25&2]#1], 
p [2568U[25&3]#1], 
r[8#l] 

P [2568T[2335:1]#1|2|] 
s[258U#l] 

) 

[ 0 8 3 3 ] 

PROOFi 1 *^m^>?zb, Ui + 1 it PXT * mMir 2> 0 
• c[#l] = 
Hash( 
DATAi 1 " 1 , 
BODYi 1 , 
C[2x[2]#l], 
C[2S[23]#1], 

(C[2S[23]#1UI].C[2S[23]#1|2|]), 

C[y,C[2S[23]]#lll|], 

C[2T[2&1]#1], 

C[2T[233]#1], 

(C[2T[23: 1]#1 ! 1 1 ] , CC2TC23: 1]#1 12|]) , 

C[2T[233]#1], 

K[2s[24T]#l] 

c[25U[25&l]#l], 

C[2A#1], 

C[2N0T(A)#1], 

C[2U[25&2]#1], 

C[2U[25&3]#1], 

C[2U[235:1]#1], 

(C[2U[235:l]#l|l|].C[2U[235:l]#l|2|]) f 
C[y,C[2U[235:l]]#llHL 
C[2T[2335:1]#1I21], 
K[2&1| aWWhl], 
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K[2& 7 I «wWh|], 
K[2x[2]#l], 
K[2J[2] (x),Q[2]#l], 
K[2y#l], 

K[2r[2].s[2]#l], 

K[2y.C[2S[233]]#l|ll], 

K[2s[24S]#l], 

K[2r[2],T[2]#l], 

K[2J[2] (x[2]),T[2&l]#l], 

K[25U[25&1]#1], 

K[2A,P[2]#1], 

K[2A ,C[2A]#1], 

K[2U[25&2]#1], 

K[2U[25&3]#1], 

K[2U[235:1]#1], 

K[2y,C[2T[2335:l]]#lll|], 

K[2s[245U]#l], 

). 

•c[#l]=c[2&l| awWh|]+c[2&7 I awWhl] , 
x[29&l| «wWhl] P[6B] =c[2&l| «wWh|] 
(C[2x[2]| awWh|]-P[2B])+K[2&l| awWhl], 
x[29&l| «wWh|] P[6B] =c[2& 7 UwWhl] 
(C[2x[2] I awWh|]- 7 P[2B])+K[2& 7 I awWhl] 

[0 8 3 4] 
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3 10] 

i 

x[28#l]P[2]+x[28#l]P[26] = 
cttlJC^xMlll+Kfcxtail], 

J[2](x[28#l])Q[2#l] = J[2](c[#l])Q[2#l] + K[2J[2](x),Q[2]#l], 
y[8#l] e F p , 

y[8#l]P[2] =c[#l](r[2:l]-r[2]) +K[2y#l], 
y[8#l] e F p , 

r[28#l]s[2:l-l] 
+ 

p[268S[233#l]P[26] 

c[#1]C[2S[23]#1] + K[2r[2] lS [2]#l], 

c[#l]C[2y,C[2S[23]]#i|1|] 
+ 

K[2y,C[2S[23]]#l|1|] 

y[8#l]C[2S[23]#i|2|] 

+ 

p[268S[233]#l |2|]P[26A[12]], 

c[#l](s[2#l]-C[2S[233]#l]) 
+ 

K[2s[24S]#l] 
s[28Sttl]Y[:l] 
r [8S[233]#i]P[2], 

ft 

r[28#i]T[2:l-l] 
+ 

P [268T[2&lHtl]P[2B] 
c[#l]C[2T[2&1]#l] + K[2r[2],T[2]#l], 

ft 

J[2] (x[28ttl])T[2&1:l-1] 
+ 

p[2B8T[233]#l]P[26] 
c[ftl]C[2T[233]#l] + K[2r[2],T[2&l]#l], 

ft) 

c[#l]C[2y,C[2T[23:l]]#l|1|] 
K[2y,C[2T[23:l]]#l|1|] 
y[8*tl]C[2T[23:l]#l|2|] 
p[268T[233]#l|2|]P[26A[l2]], 



[0 8 3 5] 
10 8 3 6] 
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c[#l](T[2#l]-C[2T[233]#l]) 

K[2s[24T]#l] 

s[28T#l]Y[:l] 

t [8T[233]#I]P[2], 

r[28#l]GA[l2F p ], 

U[25: l-l]*F[25: I |0,0,0|] (x[28#l]) 
+ 

p [2568U[25&1]#I]P[26] 

c[#l]c[25U[25&1]#l] 
+ 

K[25U[25&1]#I], 

£-wWijk, i[6],j[6],k[6] iZML 

A [8#l |wWijk|i[6], j [6],k[6]]e= F p t££*. 



A [8#l]P[2] + i o [2568A#l]P[26]=c[#l]C[2A#l]+K[2A ,P[2]#1], 

A [8#1]C[2A#1] + ^ [2568A#l]P[26]-c[#l]C[2A#l]+K[2A ,C[2A]#1], 

•C[2N0T(A)#1]-P[2]-C[2A#1], 

•c[#l]C[2U[25&2]#l]+K[2U[25&2]#l]=F[25:l| A [8L]00|N0T( A ) [8L]00] (1)*U[25&1] + p [ 
2568U[25&2]#1]P[26], 

•c[#l]C[2U[25&3]#l]+K[2U[25&3]#l]=F[25:l| A [8R]00|N0T( A ) [8R]00] (l)*U[25&2] + p [ 
2568U[25&3]#1]P[26], 

•c[#l]C[2U[235: 1]#1]+K[2U[235: 1]#1]=F[25: 1 1 |00 A [8] |00NOT( A ) [8]] U)*U[25&3] , 
•c[#l]C[2y,C[2U[235: 1]]#1 1 1 1 ] +K[2y, C [2U [235 : 1] ] #1 1 1 1 ] =y [8# 1 ] C [2U [235 : 1]#1 12|] + 
P [2568T[2335: 1]#1 1 2 1 ]P[26A[12]] , 

•c[#l](U[2#l]-C[2T[2335:l]#l])+K[2s[245U]#l]=s[258U#l]Y[:l]-r [8T[2335: 1]#1]P[2 

]o 

[0 8 3 8] 

Ui li7^AC 
[0 8 3 9] 
[13 12] 

y[4&l] e F p 

[0 8 4 0] 

JAT©i^ KLTPROOF2 1 £SHti"So 
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•P[4&l]=y[4&l]P, 

© [4&l|ll]=y[4&l] ©[41111], 
•c[&l]=Hash(DATA 2 1 - 1 II BODY2 1 " 1 
II P[4&1] II ©[4&1]), 

• y[8&l]=c[&l]y[&l]+y[441], 
•PR00F 2 '=P[4&1] II 0[4&l]ll c[&l] II y[8&l]o 
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